The ICAM Architect will define and maintain the enterprise ICAM architecture across policy enforcement, policy information, enterprise management, and resource and policy management modernization domains. This includes developing end-to-end architectural patterns for identity, attribute services, authorization flows, policy distribution, and resource and role lifecycle management. The architect will partner with technical leadership to validate modernization roadmaps, architectural decisions, and integration strategies for on-premises and cloud-native, microservices-based ICAM components. Responsibilities also include translating mission needs into technical requirements, sequence diagrams, data models, interface specifications, and system architecture artifacts; overseeing the design of modern policy enforcement and information point interfaces supporting attribute-based access control, dynamic policy evaluation, and event-driven decision making; architecting enterprise management and resource policy management capabilities including resource registration, policy lifecycle automation, attribute orchestration, and enterprise authorization services; and providing architectural guidance to DevOps and software engineering teams to ensure solutions meet scalability, resilience, security, and maintainability requirements. The architect will conduct architectural reviews, risk assessments, and compliance verification for modernization milestones and incremental releases, and will identify opportunities for innovation in identity services, authentication technologies, authorization models, and system integration patterns.
Required Skills/Experience:- Enterprise or solutions architecture experience supporting complex ICAM modernization, security, or identity and authorization programs
- Design of distributed systems, microservices architectures, and cloud-native solutions
- ICAM modernization, enterprise identity technology, or authorization and policy services architecture
- Agile methodologies including Program Increment (PI) planning, architectural runway development, and iterative delivery
- Development of architectural goals, strategic plans, and detailed implementation guidance
Preferred Skills/Experience:- Kubernetes, OpenShift, or container orchestration platforms
- Java and/or Python for modern integration and development
- GitOps tools for managing modern environments
- Identity and authorization standards including X.509, SAML, OAuth2, OIDC, and LDAP
- ABAC/RBAC models, policy-as-code, and Zero Trust-aligned access patterns
- ICAM solutions using Oracle or other enterprise-grade identity platforms
- Enterprise architecture framework certifications
- Experience supporting Intelligence Community authorization or identity systems
Qualifications:- Bachelor's degree in a STEM field, or Master's degree in a STEM field
- Ability to obtain CompTIA Security+ within 90 days of hire
- Active Top Secret security clearance with SCI eligibility
- Willingness and ability to obtain a polygraph within the customer's timeline after hire
- U.S. citizenship required
For positions requiring a federal security clearance, your clearance level must be clearly identified on your resume.
