Enterprise Architect ICAM

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

MBI (T2)

Job Family:

IT Infrastructure and Operations

Job Qualifications:

Skills:

Architecture Strategy, Security Engineering, Systems Design

Certifications:

None

Experience:

10 + years of related experience

US Citizenship Required:

No

Job Description:

Enterprise Architect ICAM

GDIT is partnering with the Department of Veterans Affairs (VA) to modernize and secure the enterprise Identity, Credential, and Access Management (ICAM) services that support millions of Veterans nationwide. As an Enterprise ICAM Architect, you will serve as a senior technical leader and subject matter expert responsible for developing the architectural strategy, design, governance, and implementation approach for large‑scale identity and access modernization initiatives.

You will guide enterprise transformation efforts that advance Zero Trust alignment, strengthen VA’s digital identity ecosystem, and ensure secure, resilient, and compliant access across the VA landscape. This role is mission‑critical and spans architecture, engineering, governance, technical leadership, and collaboration across federal and commercial environments.

HOW AN ENTERPRISE ARCHITECT WILL MAKE AN IMPACT:

• Lead enterprise‑level ICAM architecture strategy, roadmaps, and technical governance for VA’s identity modernization initiatives.
• Serve as the primary ICAM architecture SME supporting Zero Trust principles, security strategy, and enterprise identity modernization.
• Design and oversee large‑scale ICAM implementations across identity governance, authentication, authorization, lifecycle management, and privileged access.
• Develop enterprise ICAM architecture frameworks aligned with FICAM, NIST, and federal cybersecurity requirements.
• Lead the design and implementation of Access Certifications, RBAC models, identity lifecycle workflows, and customer‑focused IAM solutions.
• Architect and support application onboarding/offboarding, SSOi and SSOe integrations, and multi‑system federation approaches.
• Provide enterprise guidance on Identity Governance and Administration (IGA) capabilities and tools.
• Support identity integrations with Electronic Health Record (EHR) systems and healthcare‑focused IAM requirements.
• Collaborate with federal partners, enterprise stakeholders, and organizations such as DOW to architect federated identity solutions for diverse user populations.
• Provide expert recommendations on ICAM modernization, emerging technologies, and security architecture patterns.
• Ensure alignment with federal ICAM mandates including OMB M‑19‑17, NIST 800‑63, EO 14028, and OMB M‑22‑09.
• Participate in technical reviews, solution assessments, and enterprise‑level engineering discussions to drive secure and scalable identity capabilities.

WHAT YOU'LL NEED TO SUCCEED:

• Ability to obtain a Public Trust clearance.

• Education: Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related discipline

•10+ years of experience designing and leading ICAM architectures for complex enterprise environments in the federal and commercial sectors.
• Expertise across IAM design, implementation, deployment, operations, and lifecycle management.
• Strong background in security architecture, security strategy, regulatory compliance, and enterprise security engineering.
• Experience implementing Access Certifications, RBAC, identity lifecycle management, and governance‑driven IAM features.
• Strong understanding of application onboarding/offboarding workflows, SSOi/SSOe architectures, and federated identity integrations.
• Expertise with Identity Governance and Administration (IGA) solutions.
• Experience supporting identity architectures for Electronic Health Record (EHR) systems.
• Ability to work across an enterprise to develop federated identity architectures with external organizations and diverse user communities.
• Deep familiarity with federal ICAM standards, mandates, and requirements.

Certifications (one or more required):

• Certified Information Systems Security Professional (CISSP)

• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (CEH)
• Certified Information Systems Auditor (CISA)

• Global Information Assurance Certification (GIAC)

Security Clearance: Must be able to obtain a Public Trust