ICAM Automation Engineer
CACI International1 day ago
Remote, United States or O'Fallon, IL, USAMid Level
H1B sponsor
Base Salary
$63k - $130k/yr
Responsibilities
- Develop automated ICAM workflows for user lifecycle management, MFA enrollment, and conditional access.
- Integrate Okta, CyberArk, AWS IAM Identity Center, AWS Managed Microsoft AD, Active Directory, and AD LDS environments.
- Create Splunk ES detection rules and Splunk SOAR playbooks for SOC and Zero Trust operations.
- Automate session revocation, access removal, credential rotation, account locking, and ServiceNow incident ticket generation.
- Onboard, parse, and enrich log sources for identity and security platforms.
- Implement Zero Trust policies using Zscaler ZPA/ZIA, AWS Verified Access, and device-trust signals.
- Collaborate with engineering, SOC, and identity teams to improve automation and security outcomes.
Requirements
- Interim Secret clearance is required.
- DoD 8140 Foundational Intermediate – 671 System Testing and Evaluation Specialist designation is required, listed as tentative.
- At least one of CEH, CFR, Cloud+, GSEC, PenTest+, Security+, or SSCP certification is required.
- At least 4 years of experience in IAM automation, security orchestration, or SOC operations is required.
- Experience with Okta automation, CyberArk PAM automation, AWS IAM Identity Center, AWS Managed Microsoft AD, and AD LDS is required.
- Experience creating and tuning Splunk ES rules, developing Splunk SOAR playbooks, and onboarding logs from Okta, CyberArk, and Zscaler is required.
- Knowledge of PDP, PEP, PIP, and PAP components; Zscaler ZPA/ZIA policy automation; AWS Verified Access; and device-trust integration is required.
- Python or PowerShell automation, SAML 2.0/OIDC federation troubleshooting, FIDO2, CAC/PIV, hardware-token workflows, ABAC, SAP-specific attributes, myAuth, and DoD IdP integrations are desired.
Benefits
- Full-time regular position with up to 10% local travel.
- Flexible time off benefit, learning and development resources, healthcare, wellness, financial, retirement, family support, continuing education, and additional time-off benefits.
About CACI International
CACI International is a public government contractor that delivers enterprise IT, cybersecurity, electronic warfare, space, and intelligence solutions to U.S. defense, intelligence, and federal civilian customers. It provides systems engineering, software and data services, and mission support across C4ISR and business systems, primarily through long-term government contracts. Founded in 1962 and headquartered in Reston, Virginia, CACI trades on the NYSE under the ticker CACI.