POSITION: Senior ICAM Engineer
WORK LOCATION: Chantilly, VA
JOB CATEGORY: Information Technology
JOB TYPE: Full-Time
REQUISITION ID: EM07-57
CITIZENSHIP: United States Citizen
CLEARANCE TYPE: Top Secret/SCI
TRAVEL REQUIREMENTS: Up to 10%
E&M Technologies, Inc. is dedicated to recruiting and developing diverse, high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. E&M provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.
E&M Technologies, Inc. is currently seeking a Senior ICAM Engineer to join our team in Chantilly, VA in support of the National Geospatial-Intelligence Agency. The NGA delivers world-class geospatial intelligence that provides a decisive advantage to policymakers, military service members, intelligence professionals, and first responders.
Job Responsibilities:
- Implement ICAM modernization designs for PEP/PIP/EMS and RPMS components, ensuring alignment with architectural patterns and modernization goals. Transition from the legacy PDP to JBlocks.
- Develop and integrate microservices supporting identity, attributes, authorization, resource registration, and policy distribution.
- Work closely with the Architect to translate high-level designs into detailed engineering tasks, technical artifacts, and system interfaces.
- Support the Technical Lead by providing technical input during Program Increment (PI) planning, backlog refinement, work estimation, and risk identification.
- Develop new PEP/PIP patterns including enforcement endpoints, policy decision integrations, and attribute retrieval mechanisms.
- Enhance EMS and RPMS services by implementing automation for resource/role lifecycle management, attribute orchestration, and policy ingestion workflows.
- Collaborate closely with Development and Operations (DevOps) engineers on Continuous Integration and Continuous Delivery (CI/CD), containerization, infrastructure automation, and deployment to Kubernetes or the governments currently installed application platform.
- Troubleshoot complex identity, authentication, authorization, and policy-related issues across legacy and modernized components.
- Contribute to engineering documentation including design specifications, data flow diagrams, configuration standards, and interface definitions.
- Ensure modernization activities reduce operational overhead and improve system reliability, maintainability, and observability.
- Participate in integration testing, operational readiness testing, and deployment validation across multiple environments and security domains.
- Mentor junior engineers and promote best practices in secure coding, microservices development, and ICAM integration.
Minimum Qualifications:
- Bachelor’s degree in a Science, Technology, Engineering, and Mathematics (STEM) field and 8+ years of relevant experience, or equivalent experience.
- Hands-on experience developing or integrating systems related to identity, authentication, authorization, or enterprise security.
- Experience implementing distributed systems or microservices architectures on modern platforms.
- Experience supporting Agile teams and contributing to iterative delivery of new capabilities.
- Ability to interpret architectural guidance and convert designs into high quality, maintainable engineering solutions.
- Ability to obtain Security+ within 90 days of hire.
- All candidates must be US CITIZENS to be considered for the position.
- Must have and be capable of maintaining a U.S. Department of Defense (DoD) security clearance at the required level and ability to pass a Counterintelligence Polygraph.
Preferred Qualifications:
- Experience with Kubernetes or OpenShift for deployment and container orchestration.
- Programming experience with Java and/or Python.
- Familiarity with GitOps tools.
- Experience with Amazon Web Services (AWS), Linux, or containerization technologies.
- Knowledge of identity and access standards: X.509, SAML, OAuth2, OIDC, LDAP.
- Experience with Oracle products or similar ICAM vendor technologies.
- Experience implementing ABAC/RBAC models, policy-based access controls, and ZT aligned authorization patterns.
- Experience supporting Intelligence Community (IC) or Department of War (DoW) systems, particularly authorization and identity-centric services.
To Apply for this Position:
You must have the Minimum Qualifications in your resume to be selected as a candidate.
The salary range provided is a good faith estimate representative of all experience levels. E&M considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills.
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
E&M anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require E&M to shorten or extend the application window.
E&M is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. E&M provides affirmative action in employment for qualified Individuals with a Disability and Protected
Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.
As part of the federal government’s transition to the Trusted Workforce 2.0 Continuous Vetting framework, the Defense Counterintelligence and Security Agency (DCSA) is expanding enrollment in the FBI Rap Back program for cleared industry personnel beginning April 1, 2026.
Rap Back (Record of Arrest and Prosecution Back) is a service provided by the FBI that allows authorized agencies to receive notifications if there are updates to an individual’s criminal history record while they hold a security clearance. This supports continuous vetting of cleared personnel.
Per DCSA guidance, we are required to provide the following FBI privacy advisements to all cleared employees:
• FBI Privacy Act Notice
• Noncriminal Justice Applicant’s Privacy Rights