Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 3 days ago

ICAM Engineer

ECS FEDERAL LLC255 open roles

Where
Fort Meade, MD, USA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowICAM EngineerECS FEDERAL LLC · Fort Meade, MD, USA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ECS FEDERAL LLC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. ECS FEDERAL LLC postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: first seen 3 days ago

ECS FEDERAL LLC median: 2 days open

The posting

Everforth ECS is seeking an Identity Credential and Access Management (ICAM) Engineer to work in our Ft. Meade, MD office in an onsite capacity.

Everforth ECS is seeking an ICAM Engineer to support robust Impact Level (IL) 5 and IL6 programs in an operational DoW environment that houses multiple U.S. Coalition Mission Partner Environments (MPE). The ICAM Engineer will serve as the Ping Identity SME displaying expertise with PingFederate and Ping Directory. You will help clients understand emerging technical solutions relative to client policies and operational requirements and apply analytical and innovative strategies to develop solutions to address client needs. The candidate will contribute to technical artifacts and thought leadership for IAM tools relating to Credential Management, Public Key Infrastructure, Alternate Credentials, Directory Services, Authentication solutions, and ICAM integrations.

This position is a demanding, high-energy role that requires innovative ideas to manage identities, credentials, and access across Mission Partner Environments (MPE). The ideal candidate has advanced technical acumen; essential soft skills, including analytical thinking, problem-solving, communication, and proven leadership abilities; and intellectual curiosity critical for analyzing ICAM needs and developing solutions to address them. The ICAM SME/Engineer reports to the Senior Cyber Security Engineer and collaborates closely with the Engineering team.

Responsibilities:

  • Serve as the ICAM SME for Azure based DOD environments.
  • Implement, maintain, and optimize enterprise systems in alignment with organizational standards and SOPs.
  • Monitor and manage all installed systems, infrastructure, and directory services.
  • Configure, test, and maintain operating systems, application software, and system management tools.
  • Evaluate existing systems and provide technical guidance to IT support teams.
  • Lead the development and integration of customized software and hardware solutions.
  • Plan and implement automation to improve operational efficiency.
  • Design and maintain security controls to ensure data integrity and system protection.
  • Ensure high availability of technical resources and maintain accurate system inventories.
  • Provide timely reporting and rapid response to system issues or outages.
  • Support the development and enhancement of the client’s Enterprise Directory, including LDAP schema design, object classes, attributes, queries, and group structures.
  • Develop directory integration solutions across directory and database systems.
  • Configure and support enterprise Identity Management systems, including role based access, segregation of duties, workflow automation, and periodic access reviews.
  • Review and implement ICAM integration requirements with adherence to an organization’s mission, goals, and standards.
  • Experience working in client services environments and engaging with both business and technical stakeholders.
  • Prepare technical standards, provide technical advice and guidance, and collaborate with other programmers to conceptualize and develop design.
  • Demonstrated ability to write technical documentation, including product analysis, as-is/to-be architectures, and network and infrastructure diagrams.
  • Demonstrated experience in migration of ICAM technologies, including transitioning legacy applications to innovative and best of breed solutions.
  • Experience developing and briefing materials and executive summaries on ICAM architecture, implementation, and policy
  • Support security assessments, audits, and ATO activities, including documentation and control evidence related to ICAM.
  • Other duties, as assigned.

Salay Range: 170,000-190,000

General Description of Benefits

  • U.S. Citizen.
  • Active Secret security clearance.
  • Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related STEM (Science, Technology, Engineering and Mathematics) discipline.
  • 10+ years of technical experience developing ICAM architectures and strategies with a wide array of products (e.g., Intercede MyID, SailPointIIQ, Okta, CyberArk, PKI).
  • Minimum DoD 8140 IAT Level II certification (e.g., CompTIA Security+, CySA+, GSEC, SSCP).
  • Ability to work 5 days/week onsite at 6910 Cooper Ave, Ft. Meade, MD.
  • Experience with the following: Configuring and troubleshooting SAML/OIDC federation, OAuth/SCIM provisioning, LDAP integrations, attribute mappings, and partner identity connections. Supporting multi-partner ICAM integrations, SSO, directory synchronization, access policies, and end-to-end identity flow troubleshooting across secure enterprise environments
  • Strong PowerShell scripting experience.
  • Knowledge of: ADFS, Azure App Proxy, WPAD, and MFA technologies, especially Certificate Based Authentication (CBA).
  • Deep knowledge of Active Directory, including: Domain controller maintenance and upgrades GPO management DNS and core AD infrastructure
  • Experience with Entra ID (Azure AD), including: Application registrations and SSO onboarding Intune policy management DNS and core AD infrastructure
  • Understanding of PKI technologies (LDAP directories, HSMs, OCSP) and security best practices.
  • Experience working within large federal IT infrastructures.
  • Recent experience with deployment of identity and credential management solutions; knowledge of federal cybersecurity and zero trust policies, requirements and standards.
  • Strong understanding stakeholder requirements and expectations, system architecture, infrastructure build and documentation, configuration and deployment, as well as existing and emerging federal policy including HSPD-12 and NIST documents.
  • Exceptional analytical, problem-solving, and communication skills.
  • Strong decision-making ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
  • Proven ability to remain calm, decisive, and methodical under pressure.
  • Advanced proficiency with Microsoft Office tools and O365, including Word, Excel, PowerPoint, Teams, Outlook, and SharePoint.
  • Experience designing, implementing, and supporting ICAM solutions in Microsoft Azure cloud environments.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ECS FEDERAL LLC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ECS FEDERAL LLC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ECS FEDERAL LLC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.