Senior ICAM Architect

Caci•22h ago

United StatesRemote$105.1K–$231.1KFull-timeSenior Level10+ yrs exp

Job Title: Senior ICAM Architect Travel: Continental US * * * The Opportunity: CACI is seeking a highly experienced Senior Identity, Credential, and Access Management (ICAM) Architect to support the design and implementation of next-generation ICAM capabilities for U.S.

Navy tactical edge environments. The successful candidate will lead the development of enterprise-to-edge identity architectures that enable secure, resilient, and interoperable access across multiple cybersecurity enclaves, mission networks, and operational environments.

This role requires expertise in Zero Trust Architecture (ZTA), enterprise identity services, tactical communications, cybersecurity architecture, and emerging ICAM technologies. The candidate will evaluate commercial and government solutions, identify capability gaps, and develop technology transition strategies that support Navy operational requirements

Responsibilities

Lead the design and development of Tactical Identity, Credential, and Access Management (TIDE ICAM) architectures supporting Navy operational, afloat, expeditionary, and tactical edge mission environments.
Develop enterprise-to-edge identity solutions spanning multiple cybersecurity enclaves, security domains, and classification levels while ensuring alignment with DoD and Department of the Navy cybersecurity strategies.
Architect identity capabilities that operate effectively in Disconnected, Disrupted, Intermittent, and Low-Bandwidth (DDIL) environments and integrate with existing Navy identity infrastructure.
Develop and evaluate Zero Trust identity architectures incorporating authentication, authorization, federation, credential management, privileged access management, and identity governance principles.
Conduct market research, technical evaluations, and product assessments of commercial, government, and emerging identity technologies to identify best-fit solutions for Navy mission requirements.
Identify capability gaps in commercial offerings and recommend alternative strategies, including Government Off-The-Shelf (GOTS) solutions, SBIR initiatives, CRADAs, rapid prototyping efforts
custom development approaches.
Design, develop, and demonstrate proof-of-concept tactical edge Identity Provider (IdP) solutions supporting both user and non-user identities, including device, machine, service, platform, and workload identities.
Evaluate identity synchronization, federation, credentialing, and access management approaches against operational constraints, cybersecurity requirements, and Zero Trust objectives.
Serve as a technical advisor to PMW 160 cybersecurity leadership by providing expert recommendations on ICAM strategy, cybersecurity modernization, risk mitigation, and technology adoption.
Share lessons learned, industry best practices, implementation patterns, and anti-patterns to inform cybersecurity strategy, architecture decisions, and program execution.
Prepare weekly status reports, executive briefings, technical documentation
recommendations while coordinating with government stakeholders, cybersecurity teams, engineers, acquisition personnel

Qualifications

Required: Active Secret Clearance Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity
related discipline. 10+ years of experience in cybersecurity architecture, identity management
enterprise security engineering.
Demonstrated experience designing ICAM solutions for Department of Defense or Federal Government environments.
Knowledge of DoD identity and access management standards, including PKI, federation, credentialing, authentication, authorization, and privileged access management.
Desired: Prior Navy or maritime mission experience Experience with PEOs, PMWs, NAVWAR, PEO C4I, acquisition PMOs, or similar program offices.
PMI PMP or equivalent credential - What You Can Expect: A culture of integrity.
At CACI, we place character and innovation at the center of everything we do.
As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day.
You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Pay Range : There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications.
Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.
We offer competitive compensation, benefits and learning and development opportunities.
Our broad and competitive mix of benefits options is designed to support and protect employees and their families.
At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
Since this position can be worked in more than one location, the range shown is the national average for the position.
The proposed salary range for this position is: $105,100-$231,100 CACI is an Equal Opportunity Employer.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran
any other protected characteristic.

Required skills

Zero Trust Architecturecybersecurityidentity managemententerprise security engineeringPKIfederationcredentialingauthenticationauthorizationprivileged access management