Identity and Access Management (ICAM) Engineer

Looking for an opportunity to make an impact?

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

If this sounds like a mission you want to be a part of, keep reading!

The Health and Civil Sector uses a wide range of capabilities in Digital Modernization, Mission Software Systems, and enabling technologies like Artificial Intelligence and Machine Learning to support our customers’ mission in advancing biomedical research and protecting public health. Our team’s focus is ensuring our health customers have the right solutions to keep pace with an ever-evolving public health landscape and prevent the next public health crisis.  To explore and learn more, click here!

Your greatest work is ahead!

Job Description

Leidos’ Civilian Health Solutions Operation is seeking a dynamic, mission-centric hands-on Identity and Access Management (ICAM) Engineer to support a federal agency’s large, mission-critical Enterprise Security. 

Candidate local to the DC metropolitan area is preferred.

Candidate MUST be US Citizen or US Person with the ability to obtain a Public Trust Clearance.

Candidate MUST be located in the United States currently and for the current three consecutive years

The ICAM Lead shall support the planning and execution of ICAM Governance and program activities.  The candidate must possess strong communications skills and the demonstrated ability to convey technical concepts to non-technical audiences.

Primary Responsibilities

• Develop and implement comprehensive cybersecurity programs to protect customer data and systems; support the lifecycle management of digital identities.
• Provide ongoing technical expertise for the agency’s identity credential and access management mechanisms that identify, authenticate, and authorize individuals and technical services to enable appropriate access to resources in a standardized and interoperable manner.
• Provide solutions and support for lifecycle management of non-PIV multifactor credentials such as Microsoft Entra ID (formerly Azure AD) multifactor authentication (MFA) capabilities.
• Implement and maintain Azure well-architected security principles, ensuring robust security posture, including managing role-based access control (RBAC) to enforce least privilege access and safeguard resources.
• Integrate and manage Entra ID and/or Okta with various SaaS products to streamline authentication and authorization processes, ensuring seamless user access and enhanced security.
• Provide solutions and support for role-based and attribute-based lifecycle management to control access permissions.
• Assist with Azure Privileged Identity Management (PIM) to enhance the security of administrative roles by providing just-in-time (JIT) access to privileged resources.
• Monitor and audit privileged access activities through Azure PIM to ensure compliance with organizational security policies and regulatory requirements.
• Configure and maintain Azure PIM policies, including approval workflows, role assignments, and access reviews, to ensure appropriate control over privileged accounts.
• Assist with customer status reporting, metric reporting, and ICAM Governance.
• Develop security and other SOP documentation.
• Ensure proper measures are taken when a cybersecurity incident or vulnerability is discovered.
• Coordinate cybersecurity compliance inspections, tests, and reviews.
• Support the development and implementation of an effective cybersecurity education, training,

Required Qualifications:

• Active Public Trust Clearance or ability to obtain a Public Trust Clearance.
• Bachelor’s degree in computer science, Information Systems, Engineering, or other related disciplines and 8-10 years of experience, including Identity Credential and Access Management (ICAM) experience.
• Extensive experience supporting Microsoft Entra ID (formerly Azure AD) Multifactor Authentication (MFA) and implementing Azure well-architected security principles.
• Proficiency in