North Point Technology is looking to hire a Senior ICAM Engineer to join a high-impact Identity, Credential, and Access Management (ICAM) modernization effort. This role requires an active Top Secret security clearance with SCI eligibility and a willingness to obtain a polygraph within the customer's required timeline. The position is a short-term engagement of approximately seven months. The Senior ICAM Engineer will serve as a senior hands-on technical contributor, implementing modernized ICAM capabilities across multiple workstreams—including Policy Enforcement Points (PEP), Policy Information Points (PIP), Enterprise Management Services (EMS), and Resource & Policy Management Services (RPMS)—leveraging on-premises and cloud-native patterns, microservices-based designs, and modern deployment automation.

Responsibilities:

The Senior ICAM Engineer will implement ICAM modernization designs for PEP, PIP, EMS, and RPMS components, including transitioning from legacy Policy Decision Point (PDP) implementations to modern frameworks. The engineer will develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution, and will translate high-level architectural designs into detailed engineering tasks, technical artifacts, and system interfaces. The role involves providing technical input during Program Increment planning, backlog refinement, work estimation, and risk identification in support of Agile delivery. The engineer will develop new PEP/PIP enforcement patterns—including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms—and will enhance EMS and RPMS services through automation of resource and role lifecycle management, attribute orchestration, and policy ingestion workflows. Collaboration with DevOps engineers on CI/CD pipelines, containerization, infrastructure automation, and deployment to Kubernetes or equivalent government application platforms is expected. The engineer will troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components, contribute to engineering documentation including design specifications, data flow diagrams, configuration standards, and interface definitions, and participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains. The engineer will also mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration.

Required Skills/Experience:

• Hands-on development or integration of systems related to identity management, authentication, or authorization
• Design and implementation of distributed systems or microservices architectures on modern platforms
• Participation in Agile delivery teams, including PI planning, backlog refinement, and iterative capability delivery
• Interpretation of architectural guidance and conversion of designs into maintainable engineering solutions

Preferred Skills/Experience:

• Kubernetes or OpenShift for container orchestration and application deployment
• Programming in Java and/or Python
• GitOps tooling and workflows
• Amazon Web Services (AWS), Linux, or containerization technologies (e.g., Docker)
• Identity and access standards including X.509, SAML, OAuth2, OIDC, and LDAP
• Oracle ICAM products or similar enterprise ICAM vendor technologies
• Implementation of ABAC/RBAC models, policy-based access controls, and Zero Trust-aligned authorization patterns
• Experience supporting Intelligence Community or Department of Defense identity and authorization systems

Qualifications:

• Bachelor's degree in a Science, Technology, Engineering, or Mathematics (STEM) field, or equivalent experience
• Ability to obtain CompTIA Security+ within 90 days of hire
• Active Top Secret security clearance with SCI eligibility required at time of hire
• Must be willing and able to obtain a CI polygraph within the customer's required timeline
• U.S. citizenship required