ICAM Solution Architect

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CACI International Inc

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1962

🔒 Cybersecurity

Defense • IT • Cybersecurity

CACI International Inc is a diversified company that provides a wide range of services and solutions primarily to the U. S. government and commercial sectors. CACI specializes in offering security services, IT solutions, and intelligence support, helping clients enhance their cyber capabilities and secure their networks. The company is recognized for its innovative workforce and the technology it provides to clients in enterprise and mission-critical environments. CACI is committed to diversity and inclusion, offering an array of career opportunities for both new graduates and experienced professionals, including veterans.

📋 Description

• Provide technical leadership across identity, credential, and access services by shaping ICAM strategy, defining and governing architecture, aligning roadmaps with mission and security priorities, and ensuring seamless integration of ICAM capabilities across the agency • Partner with engineering, cybersecurity, governance bodies, and mission stakeholders to deliver a secure, modern, and scalable ICAM ecosystem in alignment with federal mandates and Zero Trust principles • Develop and maintain the enterprise ICAM strategy and future state architecture across identity, credential, authentication, and access services • Define modernization roadmaps aligned with Zero Trust, cloud identity patterns, and federal ICAM guidance (M 19 17, A 130, NIST 800 63, 800 53) • Conduct architectural assessments across ICAM service towers (IdMAX, NED, NCAD, Entra ID, NAMS/SNAMS, Credentialing Services, eAuth, EPACS, PKI) • Lead architectural alignment with federal identity requirements, including OMB, FISMA, NIST, CDM, and agency wide cybersecurity strategies • Support ICAM governance bodies by preparing architecture artifacts, decision briefs, risk assessments, and compliance evaluations • Establish technical guardrails, standards, and reference architectures for identity lifecycle, access provisioning, credentialing, and authentication services • Define and manage integration patterns across identity stores, directories, authentication services, access workflows, and credential platforms • Architect enterprise data flows between IdMAX → NED → NCAD/Entra ID → NAMS/SNAMS → apps and mission systems • Ensure interoperability with federal shared services (FPKI, Idemia, DHS, GSA) and enterprise solutions (Microsoft, ServiceNow, cloud platforms) • Provide technical oversight to ICAM engineering teams responsible for implementing and operating identity, credentialing, PKI, authentication, and access tools • Review and approve solution designs, data models, integrations, and changes to ICAM platforms • Monitor emerging identity trends (phishing-resistant MFA, passwordless, FIDO2, device identity, behavioral analytics) • Participate in sprint reviews, backlog prioritization, and cross-functional planning to ensure architectural alignment • Define ICAM architectural performance metrics and KPIs (identity assurance, provisioning times, certificate lifecycle health, authentication quality, account hygiene) • Guide continuous improvement initiatives, addressing technical debt, legacy dependencies, and modernization blockers

🎯 Requirements

• 10+ years of experience in Identity, Credential, and Access Management architecture or enterprise security architecture • Deep knowledge of identity lifecycle workflows, identity stores, directory services, authentication protocols (SAML, OIDC/OAuth, Kerberos), PKI • Hands on experience with one or more NASA-relevant systems: Active Directory/Entra ID, ADFS, IdMAX, PIV/PKI, NAMS/SNAMS, Siteminder/eAuth, Credentialing systems, EPACS • Strong familiarity with federal ICAM guidance: OMB A 130, M 19 17, Zero Trust (M 22 09), NIST SP 800 63, 800 53, FIPS 201 • Demonstrated ability to create technical architecture artifacts (diagrams, data flows, models, standards) • Experience leading technical teams or influencing engineers in a large enterprise environment • Desired: Experience with cloud identity governance (Azure AD/Entra ID, AWS IAM, GCP IAM) • Advanced understanding of Zero Trust identity, authentication patterns • Background integrating ICAM into CI/CD pipelines, automation frameworks

🏖️ Benefits

• healthcare • wellness • financial • retirement • family support • continuing education • time off benefits