обновлено 57 минут назад
SME Systems Engineer (ICAM Architect)
135 000 - 172 000$
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
SME Systems Engineer (ICAM Architect) (ICAM/Zero Trust): Designing and engineering secure identity, credential, and access management architectures for U.S. Coast Guard enterprise systems with an accent on hybrid Active Directory and Entra ID integration, federation, PKI, and access control. Focus on modernizing legacy identity services, applying NIST Zero Trust principles, and ensuring interoperability across large-scale enterprise product lines.
Location: Alexandria, Virginia, United States; hybrid position
Salary: $135,000–$172,000 annually
Company
delivers IT services and solutions that transform government agency operations and support public-sector missions.
What you will do
- Serve as the primary technical authority for enterprise identity management and access control frameworks supporting U.S. Coast Guard ICAM modernization.
- Modernize legacy access controls and design identity lifecycles, provisioning workflows, privilege management, authentication, authorization, federation, and SSO.
- Design and deploy Zero Trust identity principles based on NIST SP 800-207 across enterprise network hubs.
- Configure and manage PKI systems, Smart Card/CAC credentials, authenticators, MFA, PAM, and logical and physical access controls.
- Own the hybrid identity strategy integrating on-premises Active Directory with the Entra ID tenant, including Domain Controller architecture and lifecycle management.
- Lead cross-product technical architecture, interoperability, root cause analysis, performance tuning, interfaces, data flows, and compliance documentation.
Requirements
- 10+ years of experience or equivalent experience with a high school education.
- DoD 8570 IAT Level II or higher certification, such as Security+ CE, CySA+, or a vendor-specific identity certification.
- Deep knowledge of federated identity concepts and SAML, OAuth, OIDC, Active Directory, and LDAP architecture.
- Hands-on experience with Smart Card/CAC authentication and PKI certificate validation.
- Experience applying federal Zero Trust identity guidelines based on NIST SP 800-207 in enterprise networks.
- Active Secret clearance is required.
Nice to have
- Experience supporting U.S. Coast Guard or Department of Homeland Security identity management programs.
- Experience integrating data governance frameworks with ICAM solutions and enforcing data-level access controls.
- Experience with SailPoint, Okta, Microsoft Entra ID, Ping Identity, DigiCert, or Power BI.
- Advanced knowledge of RESTful API authorization, secure gateways, and data schema security standards.
Culture & Benefits
- Flexible work environment with a collaborative team setting.
- Employee Assistance Program, corporate discounts, and pet insurance.
- Learning and development platform with certification preparation content.
- Training, education, and certification assistance for full-time employees.
- Referral bonus and internal mobility programs.
Hiring process
- Virtual video interview with the hiring manager and/or team; camera use and valid photo ID are required.
- Enhanced biometric identity verification and background screening, including criminal history, education, and employment verification.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
6 часов назад
Identity Security Distinguished Engineer (IAM)
140 000 - 300 000$
4 дня назад
Senior Security Engineer, IAM (Cybersecurity)
130 000 - 195 000$
5 дней назад
Security Engineer I (IAM)
Okta
4 дня назад
Staff Identity Governance and Access Engineer (Cybersecurity)
161 000 - 221 000$
3 дня назад
Advanced Security Engineer (IAM)
104 000 - 156 000$
7 дней назад
Staff Identity and Access Management Engineer (IAM)
180 000 - 230 000$