Annapolis, Maryland, United States · Hybrid
$108k–$184k/yr
Description This role is contingent upon a contract award. ICF is seeking an IAM Lead to architect, implement, and operate the identity and access management platform for a federal technology program. Reporting to engine…
Skills: Identity and Access Management, Entra ID, Okta, Zero Trust, Privileged Access Management
Annapolis, Maryland, United States · Hybrid
$108k–$184k/yr
Description This role is contingent upon a contract award. ICF is seeking an M365 / Collaboration Platform Administrator to configure, govern, and maintain the Microsoft 365, Google Workspace, and SaaS productivity platf…
Skills: Microsoft 365, Google Workspace, SaaS Administration, Power Platform, Power Apps
Chantilly, Virginia, United States · On-site
$156k–$235k/yr
RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE REQUIRED FOR START: Yes CLEARANCE TYPE: Top Secret TRAVEL: Yes, 10% of the TimeDescription At Northrop Grumman, our employees have incredible opport…
Skills: Cybersecurity, Risk Management Framework, Cloud Security, Agile Development, Information System Security
Chantilly, Virginia, United States · On-site
$66k–$136k/yr
Job Title: Finance Control Analyst Job Category: Finance and Accounting Time Type: Full time Minimum Clearance Required to Start: TS/SCI with Polygraph Employee Type: Regular Percentage of Travel Required: None Type of T…
Skills: Financial analysis, Accounting operations, General ledger reconciliation, Debt collection, Payroll processing
New York, New York, United States · Hybrid
$139k–$289k/yr
Job Description: DXC Technology (NYSE: DXC) helps global companies run their mission‑critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across publi…
Skills: Strategic alliance management, Cybersecurity, Business development, Channel management, SASE
McLean, Virginia, United States · On-site
$117k–$209k/yr
Who Are We? Groundswell is a premier technology integrator and solution provider, resolutely committed to solving the most complex challenges facing federal agencies today. Our name, Groundswell, represents our commitmen…
Skills: Cybersecurity operations, Incident response, Microsoft Azure Government, Microsoft 365 GCC High, Cloud infrastructure
Sterling, Virginia, United States · On-site
$94k–$198k/yr
Job Title: Digital Signal Processing Engineer Job Category: Engineering Time Type: Full time Minimum Clearance Required to Start: None Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Local…
Skills: Digital Signal Processing, Python, C++, X-Midas, M2Extra
Reston, Virginia, United States · On-site
$104k–$218k/yr
Job Title: Infrastructure and Application Support Manager Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: Top Secret Employee Type: Regular Percentage of Travel Required: Ty…
Skills: Infrastructure Management, Application Support, Database Administration, Network Operations, Systems Administration
Denver, Colorado, United States · On-site
$75k–$158k/yr
Job Title: Network Operations Center (NOC) Engineer (Tier 2) Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI with Polygraph Employee Type: Regular Percentage of Trave…
Skills: TCP/IP, OSPF, BGP, Cisco Networking, Network Monitoring
Denver, Colorado, United States · On-site
$75k–$158k/yr
Job Title: Network Operations Center (NOC) Shift Lead Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI with Polygraph Employee Type: Regular Percentage of Travel Requi…
Skills: Network Operations, Team Leadership, Incident Response, Root Cause Analysis, Network Monitoring
Sterling, Virginia, United States · On-site
$132k–$290k/yr
Job Title: Network Management Systems (NMS) Linux Engineer Job Category: Engineering Time Type: Full time Minimum Clearance Required to Start: TS/SCI with Polygraph Employee Type: Regular Percentage of Travel Required: U…
Skills: Linux Administration, Automation, Ansible, CI/CD, Python
Norfolk, Virginia, United States · On-site
Great Atlantic Management has been managing self storage facilities since 1977, and we are looking for a Property Caretaker for our unmanned storage facilities in the Hampton Roads area. Our Property Caretaker is essenti…
Skills: Cleaning, Maintenance, Pest control, Task prioritization, Time management
Prince William County, Virginia, United States · On-site
Title: Senior Data Engineer Location: Reston, VA Clearance: TS/SCI w/ CI polygraph Responsibilities: Serve as capabilities and account manager for an IC customer for their Managed Attribution tools. This includes account…
Skills: Managed Attribution, Account Management, Troubleshooting, Technical Training, Cybersecurity Audits
Vienna, Virginia, United States · On-site
$176k–$215k/yr
Title: Counterintelligence Officer Belong. Connect. Grow. with KBR! KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national…
Skills: Counterintelligence, Operational tradecraft, Intelligence analysis, Case management, Program management
Arlington, Virginia, United States · On-site
Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. Tetrad Digital Integrity is seeki…
Skills: Risk Management Framework, RMF, NIST 800-53, Cloud Security, Cybersecurity
Fairfax County, Virginia, United States · Hybrid
Unissant, Inc. delivers innovative capabilities to the agencies that keep our nation healthy and safe. We apply our domain expertise, data acumen, and technology know-how to achieve breakthrough results for our clients. …
Skills: Vulnerability Management, Cybersecurity, Risk Assessment, Remediation Coordination, Vulnerability Scanning
Fairfax County, Virginia, United States · Hybrid
Unissant, Inc. delivers innovative capabilities to the agencies that keep our nation healthy and safe. We apply our domain expertise, data acumen, and technology know-how to achieve breakthrough results for our clients. …
Skills: Audit Coordination, Compliance, Governance, IT Security, Federal Audits
Fairfax County, Virginia, United States · Hybrid
Unissant, Inc. delivers innovative capabilities to the agencies that keep our nation healthy and safe. We apply our domain expertise, data acumen, and technology know-how to achieve breakthrough results for our clients. …
Skills: Security Assessment, Accreditation, ATO Lifecycle, Risk Management Framework, NIST Guidance
Fairfax County, Virginia, United States · Hybrid
Unissant, Inc. delivers innovative capabilities to the agencies that keep our nation healthy and safe. We apply our domain expertise, data acumen, and technology know-how to achieve breakthrough results for our clients. …
Skills: Incident response, Network security, Web application security, Cloud technologies, Threat detection
Fairfax County, Virginia, United States · Hybrid
Unissant, Inc. delivers innovative capabilities to the agencies that keep our nation healthy and safe. We apply our domain expertise, data acumen, and technology know-how to achieve breakthrough results for our clients. …
Skills: Privacy compliance, Security compliance, FISMA, NIST, PII protection
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
The IAM Lead will architect, implement, and operate identity and access management platforms for a federal technology program within a Zero Trust environment. Responsibilities include managing the full identity lifecycle, enforcing phishing-resistant authentication, and designing authorization models like RBAC and ABAC.
Candidates must have a bachelor's degree and at least 7 years of experience in identity and access management engineering. The role requires U.S. citizenship and the ability to obtain a Public Trust background investigation.
Description
This role is contingent upon a contract award.
ICF is seeking an IAM Lead to architect, implement, and operate the identity and access management platform for a federal technology program. Reporting to engineering leadership, this role is the subject matter authority on how users, devices, and applications authenticate and are authorized across a cloud-first, Zero Trust environment. The IAM Lead owns the full identity lifecycle, from onboarding automation to privileged access controls to external identity federation.
The ideal candidate is a senior identity engineer who has built and operated IAM programs in federal cloud environments. This is a deeply technical role. The right candidate understands not just the tooling but the underlying standards, can implement NIST identity assurance requirements, and can hold their own with cybersecurity and enterprise architecture teams on access policy design.
Job Location: This is a remote-friendly position with occasional onsite requirements in the Washington, DC Metro area.
This position requires that the job be performed in the United States. If you accept this position, you should note that ICF does monitor employee work locations and blocks access from foreign locations/foreign IP addresses and also prohibits personal VPN connections.
What You'll Be Doing
Architect, configure, and maintain identity platforms including Entra ID, Entra External ID, and Okta, covering authentication, authorization, provisioning, and lifecycle management across all users, applications, and devices.
Configure and enforce phishing-resistant authentication for all users, including passkeys, FIDO2 security keys, WebAuthn, and biometrics. Drive the transition away from legacy authentication methods toward a fully passwordless posture.
Define and implement Zero Trust access rules based on user risk, device health, location, and behavior using risk-based and conditional access policies.
Design, configure, and operate authorization models including RBAC, PBAC, and ABAC, with fine-grained permissions and attribute-based access rules aligned to job function and least-privilege principles.
Manage privileged accounts and administrative roles using privileged access management (PAM) and just-in-time elevation, ensuring that standing admin access is minimized and all elevated access is logged and time-bound.
Build and maintain HR-driven joiner, mover, and leaver automation, including automated provisioning, license assignment, role changes, access revocation, and data archival triggered by HR system events.
Federate external identities including partners, contractors, and external collaborators using Entra External ID or equivalent, including self-service registration, verification workflows, and consent management.
Configure identity proofing and verification to NIST IAL and AAL levels where required, coordinating with cybersecurity and compliance teams on assurance requirements.
Integrate applications and APIs with identity platforms using OIDC, OAuth2, SAML, and SCIM for single sign-on and automated provisioning.
Monitor sign-in activity, risk signals, and anomalies. Respond to identity-related incidents including account takeover, phishing, access abuse, and fraud in coordination with the cybersecurity team.
Maintain identity data quality and consistency across directories, HR systems, and applications, including synchronization, schema management, and attribute mapping.
Support compliance and audit activities by producing access reports, certifications, attestations, and evidence of controls.
Document identity architectures, configurations, standards, and runbooks. Provide guidance to application teams on how to onboard to central identity platforms and implement authentication best practices.
Minimum Requirements
Bachelor's degree or equivalent
7+ years of experience in identity and access management engineering or a related discipline
3+ years of hands-on experience designing and operating Entra ID or Okta in production environments, including conditional access, lifecycle management, and federation
2+ years implementing PAM solutions and just-in-time elevation controls for privileged accounts
2+ years configuring authorization models including RBAC, PBAC, or ABAC in enterprise environments
2+ years supporting federal IT programs in HHS, NIH, FDA, or other health-focused agencies
U.S. Citizenship required due to federal contract requirements
Ability to obtain and maintain a Public Trust background investigation
Candidate must reside in the US, be authorized to work in the US, and work must be performed in the US
Preferred Qualifications
Experience implementing NIST SP 800-63 identity assurance levels (IAL/AAL) in a federal context
Experience federating external identities using Entra External ID, including self-service registration and consent workflows
Familiarity with FISMA, NIST 800-53, and Zero Trust architecture requirements as they apply to identity and access
Experience integrating identity platforms with HR systems for automated joiner, mover, and leaver workflows
Relevant certifications such as Microsoft Certified: Identity and Access Administrator, Okta Certified Administrator, or equivalent
Experience supporting identity incident response including account takeover, phishing, and access abuse investigations
We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy.
We will consider for employment qualified applicants with arrest and conviction records.
Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email [email protected] and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
Read more about workplace discrimination rights or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act.
At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted. This policy is in place to maintain the integrity and authenticity of the interview process.
However, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at [email protected]. We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.
Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.
The pay range for this position based on full-time employment is:
$108,006.00 - $183,610.00DC Remote Office (DC99)Offices: Barakhamba Road, New Delhi, Delhi 110001, IN
View all jobs at ICF ConsultingBased on 5773 listings with disclosed salaries, most security & safety jobs in Virginia pay between $77k–$200k per year. Individual offers vary with seniority, company size, and specialization.
There are currently 10,537 open security & safety positions in Virginia listed on Clera. New openings are added daily as companies post roles.
Companies currently hiring include Allied Universal, Booz Allen Hamilton, Virginia Information Technologies Agency, CACI International Inc, Amazon, among others. Browse the listings above to see every active employer.
Yes — 1586 of the 10537 open security & safety positions offer remote or hybrid work (446 remote, 1140 hybrid).
Each listing links directly to the employer's application page. Apply early — fresh listings get the most recruiter attention in the first two weeks.
