{"id":4288687,"url":"https://alion.io/job/pemcco-senior-icam-engineer","title":"Senior ICAM Engineer","company":{"id":4422833,"name":"PEMCCO","domain":"pemcco.com","url":"https://alion.io/company/pemcco","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":{"grade":"C","score":68,"open_postings":19,"ghost_share":0.526,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-15T07:52:55Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":75,"max":124,"currency":"USD","period":"hour","gross":null,"usd_annual":248000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Configuration Management","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Ansible","optional":true},{"name":"AWS","optional":true},{"name":"Keycloak","optional":true},{"name":"Kubernetes","optional":true},{"name":"Okta","optional":true},{"name":"OpenShift","optional":true},{"name":"PKI","optional":true},{"name":"Python","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-13T22:39:26Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-15T04:48:35Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":1},"description":"Pay:$75.53 - $124.62 hourly, depending on experience\nBenefits:Medical, Dental, Vision, Paid Time Off, Paid Holidays, Employee Assistance Program, and other company-sponsored benefits\nSecurity Clearance: Active TS/SCI clearance with the ability to obtain and maintain a CI Polygraph\nFocus Areas:Identity & Access Management, Identity Federation, Single Sign-On (SSO), OIDC, Active Directory, Application Integration\nDo you enjoy solving complex identity and access management challenges? Are you experienced in integrating applications with enterprise identity services, troubleshooting authentication issues, and implementing secure access solutions?\nPEMCCO is seeking a Senior ICAM Engineer to support enterprise Identity, Credential, and Access Management (ICAM) capabilities. This role focuses on integrating identity services with applications, directories, and access management platforms while ensuring secure, reliable authentication and authorization across enterprise environments.\nThe ideal candidate understands how identity data, authentication, access controls, and federation services work together and enjoys collaborating with developers, administrators, and security professionals to solve complex integration challenges.\nAbout PEMCCO\nPEMCCO delivers engineering, technology, cybersecurity, and mission support services to federal government customers. Our teams develop and sustain innovative solutions that help customers modernize systems, strengthen security, and support critical mission operations.\nJob Overview\nPEMCCO is seeking an experienced Senior ICAM Engineer to develop, integrate, and support enterprise identity and access management solutions.\nIn this role, you will help connect applications, directories, and identity services while supporting authentication, authorization, provisioning, federation, and identity lifecycle management. You will work closely with software engineers, infrastructure teams, and cybersecurity professionals to ensure secure and efficient access to enterprise resources.\nThis position is ideal for professionals who enjoy troubleshooting authentication challenges, integrating applications with identity platforms, and supporting enterprise-scale identity solutions.\nWhat You'll Do\nImplement and integrate enterprise ICAM services with applications, directories, and authoritative identity sources.\nDevelop and maintain APIs and service integrations supporting identity data and access control decisions.\nConfigure and troubleshoot identity federation, single sign-on (SSO), and application authentication using OpenID Connect (OIDC) and related technologies.\nIntegrate identity platforms with Active Directory, LDAP directories, and other enterprise systems.\nAutomate account provisioning, updates, and deprovisioning processes.\nSupport migrations from legacy identity platforms to modern identity solutions.\nConfigure and maintain virtual directory services, identity synchronization, and identity data aggregation.\nResolve authentication failures, token and claim mapping issues, and authorization inconsistencies.\nSupport identity federation and secure information sharing across enterprise environments.\nProtect identity data through encryption, secure communications, and appropriate access controls.\nImplement automation and configuration management practices to ensure consistency across environments.\nDevelop and maintain technical documentation, testing procedures, configuration baselines, and operational guides.\nCollaborate with developers, system administrators, and cybersecurity teams to improve identity services and access management processes.\nWhat You Bring\nRequired Qualifications\nBachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, Mathematics, Information Technology, or a related technical field.\n10+ years of relevant professional experience.\nActive TS/SCI clearance with the ability to obtain and maintain a Counterintelligence (CI) Polygraph.\nExperience implementing, integrating, or supporting Identity and Access Management (IAM) or ICAM solutions.Hands-on experience with identity federation and application authentication technologies, including OpenID Connect (OIDC).\n\nExperience integrating applications with identity providers and managing claims, attributes, and access mappings.\nExperience working with Active Directory and LDAP-based directory services.\nUnderstanding of account lifecycle management, identity synchronization, provisioning, and entitlement management.\nExperience developing or supporting APIs, scripts, or application integrations.\nAbility to troubleshoot authentication and authorization issues across applications and identity services.\nUnderstanding of role-based access control (RBAC), attribute-based access control (ABAC), least privilege, and identity-data protection concepts.\nExperience documenting configurations, testing integrations, and supporting change management processes.\nAbility to work onsite and collaborate with cross-functional technical teams.\nPreferred Experience\nMaster's degree in a related technical discipline.\nCompTIA Security+ certification or equivalent cybersecurity certification.\nExperience with identity platforms such as PingFederate, Keycloak, SailPoint, Radiant Logic, Okta, or Secret Server.\nExperience migrating applications and services between identity platforms.\nExperience with virtual directories, Microsoft Identity Manager, directory modernization, or identity synchronization solutions.\nExperience with SAML, OAuth 2.0, and SCIM.\nExperience using Python, Go, Ansible, or similar tools for automation and integration.\nFamiliarity with AWS, AWS GovCloud, Kubernetes, or Red Hat OpenShift environments.\nExperience with PKI, certificate-based authentication, certificate lifecycle management, or secure credential handling.\nExperience supporting identity services in distributed or limited-connectivity environments.\nExperience implementing identity-centric Zero Trust security approaches.\nWhy Join PEMCCO?\nWork on challenging identity and access management initiatives that support secure enterprise operations.\nGain exposure to modern identity platforms, federation technologies, and access management solutions.\nCollaborate with software engineers, infrastructure teams, and cybersecurity professionals.\nHelp improve authentication, authorization, and identity lifecycle management processes across complex environments.\nContinue growing your expertise in enterprise IAM, federation, automation, and security technologies.\nWork Environment\nFull-time onsite position in a collaborative technical environment.\nWork closely with software developers, system administrators, cloud engineers, and cybersecurity professionals.\nOpportunities to support identity platforms, application integrations, directory services, and automation initiatives.\nFast-paced environment focused on innovation, secure access, and continuous improvement.\nExposure to modern technologies across identity management, cloud platforms, software development, and cybersecurity.\nBenefits\nMedical Insurance\nDental Insurance\nVision Insurance\nPaid Time Off\nPaid Holidays\nAdditional company-sponsored benefits\nApply Today\nIf you are passionate about identity and access management, enjoy solving authentication and authorization challenges, and want to help build secure enterprise solutions, we encourage you to apply.\nJoin PEMCCO and help deliver modern identity services that enable secure, reliable access to critical systems and applications.\nEqual Opportunity Employer\nPEMCCO, Inc. is an equal opportunity employer. The Company does not discriminate on the basis of race, color, sex, sexual orientation, gender identity or expression, religion, national origin, age, disability, genetic information, military or veteran status, pregnancy, childbirth and related medical conditions, or any other characteristic protected by applicable federal, state, or local law.","description_format":"text","description_chars":7946,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Dental insurance","Health insurance","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-11-13T22:39:26Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:3","stale_co","win:early"],"computed_at":"2026-11-15T07:52:55Z"},"pay":{"stated_usd_annual":248000,"is_top_pay":true},"html_url":"https://alion.io/job/pemcco-senior-icam-engineer","json_url":"https://alion.io/job/pemcco-senior-icam-engineer.json","meta":{"generated_at":"2026-11-15T12:35:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2600,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4422833},"rest":"https://alion.io/mcp/rest/get_company?id=4422833"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpemcco-senior-icam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpemcco-senior-icam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpemcco-senior-icam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pemcco-senior-icam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpemcco-senior-icam-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4288687}},{"tool":"search_jobs","arguments":{"company":"pemcco.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4288687},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}