Enterprise ICAM Governance Architect
999 REMOTE, United States
Full Time Senior-level / Expert Clearance required USD 114K - 252K
CACI International Inc
The Opportunity:
CACI is seeking an experienced Enterprise Identity, Credential, and Access Management (ICAM) Governance Architect to support the United States Coast Guard (USCG) under the DHS Continuous Diagnostics and Mitigation (CDM) Program. The ICAM Governance Architect will play a pivotal role in designing, governing, and enhancing enterprise-wide ICAM strategies that support secure access, identity lifecycle management, and cross-domain federation aligned with Zero Trust principles.
Responsibilities:
- Lead the design, documentation, and implementation of ICAM governance frameworks in compliance with DHS, DoD, and USCG policies and directives.
- Serve as the SME for ICAM architecture, governance, and policy integration across enterprise identity platforms.
- Define enterprise ICAM standards, processes, and controls to support identity federation, access policies, role-based access control (RBAC), attribute-based access control (ABAC), and public key infrastructure (PKI).
- Collaborate with enterprise security, infrastructure, and IAM operations teams to develop secure, scalable, and compliant identity and access solutions.
- Provide governance oversight and establish alignment of ICAM controls across AWS, Azure, and hybrid environments.
- Lead the integration of identity services including Azure AD, ADFS, PIV/CAC authentication, SAML, OAuth2, and OpenID Connect.
- Facilitate governance boards, working groups, and policy development sessions with USCG leadership, DHS stakeholders, and mission owners.
- Maintain authoritative ICAM documentation, such as enterprise strategies, Concept of Operations (CONOPS), risk assessments, and requirements traceability matrices (RTMs).
- Support IL4/IL5 boundary alignment and ensure compliance with NIST 800-53, NIST 800-63, FICAM, and Zero Trust Architecture frameworks.
- Guide identity federation initiatives with DHS, DoD, and federal partners, including onboarding and lifecycle automation workflows.
Qualifications:
- Active DoD Secret Clearance
- DoD 8570 IAT Level II Certification (e.g., Security+)
- U.S. Citizenship
- 8+ years of experience in identity and access management, including:
- Governance and policy architecture for enterprise IAM
- ICAM and Zero Trust architecture alignment
- Implementation of RBAC/ABAC, MFA, PKI, SAML, and federation
- Working knowledge of Azure AD, ADFS, and identity lifecycle tools
- 3+ years of experience developing identity strategies and CONOPS for federal agencies
- Demonstrated understanding of NIST 800-53, FICAM, and IL5 requirements
Desired:
- IAM Level III Certification (e.g., CISSP, CISM, CGRC)
- Azure or AWS identity-focused certifications (e.g., AZ-500, AWS Security Specialty)
- Experience with SailPoint, Okta, ForgeRock, or similar identity governance platforms
- Familiarity with cloud-native identity services, authentication protocols, and authorization policies
- Prior experience supporting ICAM for DHS, DoD, or other federal programs
________________________________________________________________________________________
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Your potential is limitless. So is ours.
________________________________________________________________________________________
Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more here.
Since this position can be worked in more than one location, the range shown is the national average for the position.
The proposed salary range for this position is:
$114,600-$252,100CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.
Tags: Automation AWS Azure CGRC CISM CISSP Clearance Clearance Required Cloud Compliance ConOps DoD DoDD 8570 ForgeRock Governance IAM NIST NIST 800-53 Okta OpenID PKI Risk assessment SailPoint SAML Zero Trust
Perks/benefits: Career development Competitive pay Flex hours Flex vacation Startup environment Wellness
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.