Description
Title: Sr. ICAM Engineer
Location: Charleston, SC or Washington, DC metro area. This is a full-time, on-site role at a Government facility.
We are seeking an Identity, Credential, and Access Management (ICAM) Engineer to develop, integrate, and maintain enterprise identity services supporting mission applications and secure information sharing. This role combines identity federation, directory integration, account provisioning, and application development within Department of Defense and Intelligence Community environments.
The engineer will work with software developers, infrastructure engineers, and security personnel to connect identity services with mission systems. Candidates should understand how authentication, identity attributes, and authorization decisions work across an enterprise and be able to troubleshoot the configurations, interfaces, and application code that support those functions.
What Youll Do
Implement and integrate enterprise ICAM services with mission applications, directories, and authoritative identity and attribute sources.
Develop and maintain Application Programming Interfaces (APIs) and service integrations that provide identity information and support access control decisions.
Configure and troubleshoot identity federation, single sign-on, and application authentication using OpenID Connect (OIDC) and other applicable standards.
Integrate identity platforms with Active Directory, enterprise directories, and personnel and training systems.
Automate account and group provisioning, updates, and deprovisioning while maintaining accurate identity attributes and access entitlements.
Support migration from legacy identity platforms to modern services, preserving configurations, identity mappings, provisioning behavior, and application functionality.
Implement and maintain virtual directory services, identity data aggregation, synchronization, and replication.
Work with application developers to resolve authentication failures, token and claim mapping issues, and authorization inconsistencies.
Support identity federation across networks and mission partners, applying approved data-sharing restrictions and cross-domain transfer processes.
Protect identity data through encryption, appropriate access controls, and secure service communications.
Support identity services in environments with intermittent or limited connectivity, including approved caching and synchronization of identity and authorization information.
Use automation and configuration management to establish consistent identity service deployments across environments.
Maintain integration documentation, configuration baselines, test procedures, and operational guidance.
Basic Qualifications
Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance with the ability to obtain a Counterintelligence (CI) Polygraph.
Prior experience supporting the Intelligence Community.
Bachelors degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent
10+ years of directly relevant experience
Professional experience implementing, integrating, or operating enterprise identity and access management services.
Hands-on experience with identity federation, application authentication, and OIDC.
Experience integrating applications with identity providers, including configuring claims, identity attributes, and access mappings.
Experience with Active Directory and Lightweight Directory Access Protocol (LDAP)-based directory services.
Understanding of account lifecycle management, group provisioning, identity synchronization, and entitlement management.
Experience developing or modifying APIs, scripts, or application integrations supporting identity services.
Ability to troubleshoot authentication and authorization issues across applications, identity providers, directories, and network connections.
Understanding of role-based and attribute-based access control, least privilege, and protection of identity data.
Experience documenting configurations, testing integrations, and managing changes in secure enterprise environments.
Ability to meet applicable cybersecurity workforce qualification requirements for the assigned position.
Ability to work on-site with the Customer. This is a full-time, on-site role at a Government facility.
Desired Qualifications
Masters degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent
CompTIA Security+ certification.
Identity platforms: Experience with PingFederate, Radiant Logic, SailPoint, Keycloak, Okta, or Secret Server.
Identity provider migration: Experience migrating applications from Keycloak to PingFederate or between comparable platforms, including adapting application code, claims, tokens, and identity mappings.
Directory modernization: Experience with virtual directories, Microsoft Identity Manager, directory consolidation, and migration of legacy provisioning services.
Federation standards: Experience with Security Assertion Markup Language (SAML), OAuth 2.0, and System for Cross-domain Identity Management (SCIM).
Development and automation: Experience with Go, Python, Ansible, or comparable tools for service integration and repeatable configuration.
Cloud and container platforms: Familiarity with Amazon Web Services (AWS), AWS GovCloud, Kubernetes, Red Hat OpenShift, and deployments subject to Department of Defense Impact Level 5 requirements.
Certificates and credentials: Experience with Public Key Infrastructure (PKI), certificate-based authentication, certificate lifecycle management, and secure credential handling.
Mission environments: Experience supporting identity federation across security domains or identity services under Denied, Disrupted, Intermittent, and Limited (DDIL) connectivity conditions.
Zero Trust: Experience integrating identity attributes and policy-based access decisions into application and data protection services.
Job Type & Location
This is a Contract position based out of Charleston, SC.
Pay and Benefits
The pay range for this position is $70.00 - $127.00/hr.
Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)
Job Type & Location
This is a Contract position based out of Charleston, SC.
Application Deadline
This position is anticipated to close on Nov 23, 2026.
Workplace Type
This is a fully onsite position in Charleston,SC.
About TEKsystems
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
About TEKsystems and TEKsystems Global Services
Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.
Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.
