ICAM/PKI Engineer
![]() | |
![]() United States, Virginia, Arlington | |
![]() | |
ICAM/PKI Engineer Arlington, VA (Hybrid 1 Day Per Week) Pay From: $175,000 Per Year MUST: ICAM/PKI Engineer DoD Secret clearance and the willingness to obtain a TS/SCI Eligibility Certifications: DoD 8570/8140 IAT Level II certification 8 years of general experience in IAM, PKI, cybersecurity or a related field. 3 years of experience designing and managing PKI solutions. Integrating PKI solutions in the cloud (Azure, AWS) is a major plus. Experience with containerization technologies (e.g. Kubernetes) Prior experience with hardware tokens (e.g., smart cards, USB tokens) Experience in identity and access management, with hands-on experience with various ICAM tools and technologies Proficiency with directory services (e.g., Active Directory), HSMs (e.g., Thales, AWS CloudHSM), and PKI platforms (e.g., Microsoft ADCS, Venafi, EJBCA) Understanding of common protocols such as LDAP, SAML and OIDC Excellent problem-solving skills and the ability to work independently as well as collaboratively in a team environment Communication and interpersonal skills, with the ability to explain complex technical concepts to non-technical stakeholders. Education : Bachelor's degree in information systems, engineering, or a related field (or equivalent experience) DUTIES: ICAM/PKI Engineer that will support the design, deployment, and management of identity, credential, and access management solutions for a DoD agency. The role requires a blend of technical expertise, strategic planning, and effective communication to ensure that the ICAM solution supports the organization's security posture and business objectives. Responsibilities Include: Design, implement, and maintain robust ICAM solutions, ensuring alignment with industry best practices and regulatory requirements Design, deploy, and manage PKI systems (root/intermediate CAs, registration authorities) Define certificate policies, certificate templates, and certificate lifecycle processes (issuance, renewal, revocation) Collaborate with IT and cybersecurity teams to integrate ICAM solutions with existing systems and applications, facilitating seamless user experiences and secure access control Implement and configure identity providers (IdPs) and federation (SAML, OAuth/OIDC) Produce technical documentation, runbooks, and train stakeholders on PKI best practices Engage with stakeholders across the organization to gather requirements, provide ICAM-related guidance, and ensure that access management needs are met in a secure and compliant manner Monitor emerging trends and technologies in the ICAM space, evaluating and recommending tools and practices Support high-level briefings and meetings with the Government Quadrant is an affirmative action/equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, status as a protected veteran, or status as an individual with a disability. "Healthcare benefits are offered to all eligible employees according to compliance mandated by the Affordable Care Act". |