ICAM Solution Architect

CACI International Inc

ICAM Solutions Architect responsible for shaping ICAM strategy and ensuring integration across agency. Delivering secure and scalable ICAM ecosystem aligned with federal mandates and Zero Trust principles.

Posted 6/30/2026full-timeRemote • 🇺🇸 United StatesSeniorLead💰 $105,100 - $231,100 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformServiceNow

About the role

Key responsibilities & impact

Provide technical leadership across identity, credential, and access services by shaping ICAM strategy, defining and governing architecture, aligning roadmaps with mission and security priorities, and ensuring seamless integration of ICAM capabilities across the agency
Partner with engineering, cybersecurity, governance bodies, and mission stakeholders to deliver a secure, modern, and scalable ICAM ecosystem in alignment with federal mandates and Zero Trust principles
Develop and maintain the enterprise ICAM strategy and future state architecture across identity, credential, authentication, and access services
Define modernization roadmaps aligned with Zero Trust, cloud identity patterns, and federal ICAM guidance (M 19 17, A 130, NIST 800 63, 800 53)
Conduct architectural assessments across ICAM service towers (IdMAX, NED, NCAD, Entra ID, NAMS/SNAMS, Credentialing Services, eAuth, EPACS, PKI)
Lead architectural alignment with federal identity requirements, including OMB, FISMA, NIST, CDM, and agency wide cybersecurity strategies
Support ICAM governance bodies by preparing architecture artifacts, decision briefs, risk assessments, and compliance evaluations
Establish technical guardrails, standards, and reference architectures for identity lifecycle, access provisioning, credentialing, and authentication services
Define and manage integration patterns across identity stores, directories, authentication services, access workflows, and credential platforms
Architect enterprise data flows between IdMAX → NED → NCAD/Entra ID → NAMS/SNAMS → apps and mission systems
Ensure interoperability with federal shared services (FPKI, Idemia, DHS, GSA) and enterprise solutions (Microsoft, ServiceNow, cloud platforms)
Provide technical oversight to ICAM engineering teams responsible for implementing and operating identity, credentialing, PKI, authentication, and access tools
Review and approve solution designs, data models, integrations, and changes to ICAM platforms
Monitor emerging identity trends (phishing-resistant MFA, passwordless, FIDO2, device identity, behavioral analytics)
Participate in sprint reviews, backlog prioritization, and cross-functional planning to ensure architectural alignment
Define ICAM architectural performance metrics and KPIs (identity assurance, provisioning times, certificate lifecycle health, authentication quality, account hygiene)
Guide continuous improvement initiatives, addressing technical debt, legacy dependencies, and modernization blockers

Requirements

What you’ll need

10+ years of experience in Identity, Credential, and Access Management architecture or enterprise security architecture
Deep knowledge of identity lifecycle workflows, identity stores, directory services, authentication protocols (SAML, OIDC/OAuth, Kerberos), PKI
Hands on experience with one or more NASA-relevant systems: Active Directory/Entra ID, ADFS, IdMAX, PIV/PKI, NAMS/SNAMS, Siteminder/eAuth, Credentialing systems, EPACS
Strong familiarity with federal ICAM guidance: OMB A 130, M 19 17, Zero Trust (M 22 09), NIST SP 800 63, 800 53, FIPS 201
Demonstrated ability to create technical architecture artifacts (diagrams, data flows, models, standards)
Experience leading technical teams or influencing engineers in a large enterprise environment
Desired: Experience with cloud identity governance (Azure AD/Entra ID, AWS IAM, GCP IAM)
Advanced understanding of Zero Trust identity, authentication patterns
Background integrating ICAM into CI/CD pipelines, automation frameworks

Benefits

Comp & perks

healthcare
wellness
financial
retirement
family support
continuing education
time off benefits

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Identity Lifecycle WorkflowsAuthentication Protocols (SAML, OIDC/OAuth, Kerberos)PKITechnical Architecture ArtifactsCloud Identity GovernanceCI/CD IntegrationData FlowsModernization RoadmapsIdentity Assurance MetricsCredentialing Systems

Soft Skills

Technical LeadershipTeam CollaborationInfluencing EngineersContinuous Improvement