Duties May Include- Define and maintain the enterprise ICAM architecture across PEP/PIP, EMS, and RPMS modernization, ensuring alignment with NGA's Zero Trust and ICAM strategic framework, including transition from the legacy PDP to JBlocks.
- Develop end-to-end architectural patterns for identity, attribute services, authorization flows, policy distribution, and resource/role lifecycle management.
- Partner with the Technical Lead to validate modernization roadmaps, architectural decisions, and integration strategies for on-prem and cloud-native, microservices-based ICAM components.
- Translate mission needs into technical requirements, sequence diagrams, data models, interface specifications, and system architecture artifacts.
- Oversee the design of modern PEP/PIP interfaces supporting attribute-based access control, dynamic policy evaluation, and event-driven decision making.
- Architect improved EMS and RPMS capabilities, including resource registration, policy lifecycle automation, attribute orchestration, and enterprise authorization services.
- Provide architectural guidance to DevOps and Software teams to ensure solutions meet scalability, resilience, security, and maintainability requirements.
- Conduct architectural reviews, risk assessments, and compliance verification for modernization milestones and incremental releases.
- Ensure modernization reduces operational overhead through automation, standardization, improved observability, and optimized deployment pipelines.
- Identify opportunities for innovation in identity services, authentication technologies, authorization models, and system integration patterns.
- Serve as a senior advisor to program management, providing technical insight to support planning, budgeting, and customer engagement.
RequirementsRequired Qualifications- Master's degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 10+ years of relevant experience, or Bachelor's degree and 12+ years of relevant experience.
- Demonstrated experience as a solutions architect, systems architect, or enterprise architect supporting complex modernization, security, or ICAM programs.
- Significant experience designing distributed systems, microservices architectures, and cloud-native solutions.
- Experience leading or supporting teams engaged in ICAM modernization, enterprise identity technology, or authorization/policy services.
- Familiarity with Agile methodologies and experience contributing to Program Increment (PI) planning, architectural runway development, and iterative delivery.
- Ability to define architectural goals, strategic plans, and detailed implementation guidance aligned with mission priorities.
- Ability to obtain CompTIA Security+ within 90 days of hire.
- Active Top Secret security clearance upon hire with SCI eligibility.
- U.S. citizenship.
Desired Qualifications- Experience with Kubernetes, OpenShift, or container orchestration platforms.
- Experience with modern programming languages and integration (Java and/or Python).
- Knowledge of GitOps tools for managing modern environments.
- Certifications in enterprise architecture frameworks.
- Expertise with identity and authorization standards (X.509, SAML, OAuth2, OIDC, LDAP).
- Experience architecting ICAM solutions using Oracle or other enterprise-grade identity platforms.
- Experience defining ABAC/RBAC models, policy-as-code, and Zero Trust-aligned access patterns.
- Prior experience supporting NGA or Intelligence Community authorization/identity systems.
BenefitsAt Trinity Global Consulting (TGC), we value our employees and provide a comprehensive benefits package that includes:
- Medical, Dental & Vision Coverage - Coverage for eligible employees and family through CareFirst and VSP.
- Paid Time Off - PTO granted in accordance with contract requirements.
- Paid Holidays - 11 federal holidays observed annually.
- Disability & Life Insurance - Short-term/long-term disability, life insurance, and AD&D coverage included.
- 401(k) Retirement Plan - Competitive plan managed through Ameritas.
- Professional Training - Formal training provided as required, with additional learning opportunities based on role.
