Journeyman ICAM Administrator

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS219, T3, Band 6

Job-Specific Essential Duties and Responsibilities:
- Operate, maintain, and sustain enterprise directory, federation, and Single Sign-On (SSO) services in support of DHS IT and OT environments, including on-premises, cloud, and hybrid systems.
- Serve as a Tier-2 ICAM engineer, troubleshooting complex authentication, identity, and access issues, and implementing approved configuration changes across directory and SSO platforms.

- Manage PIV-based multi-factor authentication (MFA) and ensure compliance with HSPD-12 requirements for logical access.

- Enforce role-based access control (RBAC) and least-privilege principles, including privileged account lifecycle management, audits, and support for privileged user training.

- Maintain comprehensive ICAM audit trails, ensuring logging, monitoring, and evidence collection support DHS compliance, cybersecurity operations, and audit readiness.

- Produce ICAM compliance, lifecycle, and metrics reporting, including inactive account identification, service account tracking, and annual service account credential resets.

- Develop and maintain detailed ICAM documentation, workflows, and standard operating procedures to support operational transparency, resilience, and knowledge transfer.

Job-Specific Minimum Requirements:

- Hands-on experience operating enterprise directory services and SSO/federation platforms

- Experience supporting PIV-based MFA and HSPD-12 logical access compliance

- Proven ability to manage privileged accounts, RBAC enforcement, and least-privilege controls

- Experience maintaining ICAM audit logs, lifecycle reporting, and compliance artifacts

- Ability to identify inactive accounts, track service accounts, and manage annual credential resets

- Experience supporting ICAM services across on-premises, cloud, and hybrid environments

- Familiarity with integrating ICAM operations with cybersecurity, incident response, and audit functions

- Bachelor's degree in information systems, Computer Science, Cybersecurity, or a related field (or equivalent experience)

- 5+ years supporting enterprise identity, directory, or access management services

Preferred Skills and Qualifications:

- Experience supporting federal government environments

- Familiarity with Zero Trust identity concepts and enterprise authentication modernization

- Experience developing automated audit reporting and identity analytics dashboards

- Strong documentation and stakeholder communication skills

- Experience supporting ICAM-related user and privileged access training initiatives

#techjobs #clearance #veteransPage #LI-remote

Minimum Requirements

TCS219, T3, Band 6

EEO Statement

Maximus is an equal opportunity employer.

We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected character...