ICAM/PKI Engineer

We are seeking an ICAM/PKI Engineer that will support the design, deployment, and management of identity, credential, and access management solutions for a DoD agency. The role requires a blend of technical expertise, strategic planning, and effective communication to ensure that the ICAM solution supports the organization's security posture and business objectives.

Responsibilities Include:

• Design, implement, and maintain robust ICAM solutions, ensuring alignment with industry best practices and regulatory requirements
• Design, deploy, and manage PKI systems (root/intermediate CAs, registration authorities)
• Define certificate policies, certificate templates, and certificate lifecycle processes (issuance, renewal, revocation)
• Collaborate with IT and cybersecurity teams to integrate ICAM solutions with existing systems and applications, facilitating seamless user experiences and secure access control
• Implement and configure identity providers (IdPs) and federation (SAML, OAuth/OIDC)
• Produce technical documentation, runbooks, and train stakeholders on PKI best practices
• Engage with stakeholders across the organization to gather requirements, provide ICAM-related guidance, and ensure that access management needs are met in a secure and compliant manner
• Monitor emerging trends and technologies in the ICAM space, evaluating and recommending tools and practices
• Support high-level briefings and meetings with the Government

Qualifications:

• Education:
  
  
  
  • Bachelor's degree in information systems, engineering, or a related field (or equivalent experience)
  
  
  
  
• Experience:
  
  
  
  • Eight (8) years of general experience in IAM, PKI, cybersecurity or a related field.
  • Minimum of 3 years of experience designing and managing PKI solutions. Integrating PKI solutions in the cloud (Azure, AWS) is a major plus.
  
  
  
  
• Citizenship and Clearance:
  
  
  
  • US Citizenship is required
  • Must have an active DoD Secret clearance and the willingness to obtain a TS/SCI Eligibility
  
  
  
  
• Certifications:
  
  
  
  • DoD 8570/8140 IAT Level II certification
  
  
  
  
• Skills:
  
  
  
  • Experience in identity and access management, with hands-on experience with various ICAM tools and technologies
  • Proficiency with directory services (e.g., Active Directory), HSMs (e.g., Thales, AWS CloudHSM), and PKI platforms (e.g., Microsoft ADCS, Venafi, EJBCA)
  • Understanding of common protocols such as LDAP, SAML and OIDC
  • Excellent problem-solving skills and the ability to work independently as well as collaboratively in a team environment
  • Communication and interpersonal skills, with the ability to explain complex technical concepts to non-technical stakeholders.
  
  
  
  
• Location:
  
  
  
  • This is a hybrid position located in Arlington, VA.
  • Occasional travel (Up to 10%) to support customer meetings or corporate initiatives may be required.
  
  
  
  

Desired Qualifications:

• Reside in the National Capitol Region (NCR) with the ability to attend in-person meetings and events
• Experience with containerization technologies (e.g. Kubernetes)
• Prior experience with hardware tokens (e.g., smart cards, USB tokens)

Work Environment and Physical Demand:

• Prolonged periods sitting at a desk.

Compensation: $175,000 - $195,000