Senior ICAM Engineer - Technician Level 4

Senior ICAM Engineer - Technician Level 4

(PDP, PEP/PIP, EMS & RPMS Modernization)

Location: Chantilly, VA

Clearance: TS, SCI/Poly eligible

Certifications: Ability to obtain Security+ within 90 days of hire.

(THIS ROLE IS A TEMPORARY 7 MONTH CONTRACT)

Job Description:

GEOAxIS is currently modernizing legacy ICAM components including Policy Enforcement Points (PEP), Policy Information Points (PIP), Enterprise Management Services (EMS), and Resource & Policy Management Services (RPMS) using on-prem and cloud-native patterns, modern vendor open-source technologies, improved deployment automation, and microservices-based designs. The Senior ICAM Engineer (Technician Level 4) plays a critical role in implementing the Architect’s designs and fulfilling the Technical Lead’s engineering direction. This position will design, develop, integrate, test, and troubleshoot modernized ICAM capabilities, serving as a senior hands-on contributor across multiple modernization workstreams. This position is a short‑term assignment with an expected duration of 7 months.

Duties May Include:

• Implement ICAM modernization designs for PEP/PIP/EMS and RPMS components,

ensuring alignment with architectural patterns and modernization goals. Transition from the legacy PDP to JBlocks.

• Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
• Work closely with the Architect to translate high-level designs into detailed engineering

tasks, technical artifacts, and system interfaces.

• Support the Technical Lead by providing technical input during Program Increment (PI)

planning, backlog refinement, work estimation, and risk identification.

• Develop new PEP/PIP patterns including enforcement endpoints, policy decision

integrations, and attribute retrieval mechanisms.

• Enhance EMS and RPMS services by implementing automation for resource/role lifecycle

management, attribute orchestration, and policy ingestion workflows.

• Collaborate closely with Development and Operations (DevOps) engineers on Continuous Integration and Continuous Delivery (CI/CD), containerization, infrastructure automation, and deployment to Kubernetes or the governments currently installed application platforms.
• Troubleshoot complex identity, authentication, authorization, and policy-related issues

across legacy and modernized components.

• Contribute to engineering documentation including design specifications, data flow

diagrams, configuration standards, and interface definitions.

• Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability.
• Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains.
• Mentor junior engineers and promote best practices in secure coding, microservices

development, and ICAM integration.

Requirements/Qualifications:

• Bachelor’s degree in a Science, Technology, Engineering, and Mathematics (STEM) field

and 8+ years of relevant experience, or equivalent experience.

• Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
• Experience implementing distributed systems or microservices architectures on modern

platforms.

• Experience supporting Agile teams and contributing to iterative delivery of new capabilities.
• Ability to interpret architectural guidance and convert designs into high-quality,

maintainable engineering solutions.

• Ability to obtain Security+ within 90 days of hire.

Preferred Qualifications:

• Experience with Kubernetes or OpenShift for deployment and container orchestration.
• Programming experience with Java and/or Python.
• Familiarity with GitOps tools.
• Experience with Amazon Web Services (AWS), Linux, or containerization technologies.
• Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC, LDAP.
• Experience with Oracle products or similar ICAM vendor technologies.
• Experience implementing ABAC/RBAC models, policy-based access controls, and ZT

aligned authorization patterns.

• Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services.

Clearance Requirements*

Requires an active Top Secret security clearance upon hire and must meet SCI eligibility. Must be willing and able to obtain a polygraph within the customer’s timeline after hire. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required.