ICAM Automation Engineer

Salary: $63,300 - 129,700 per year Requirements: Interim Secret clearance (minimum) DoD 8140 Foundational Intermediate – 671 System Testing and Evaluation Specialist certification (tentative) At least one of these certifications: CEH, CFR, Cloud+, GSEC, PenTest+, Security+, or SSCP Four or more years of experience in IAM automation, security orchestration, or SOC operations Experience automating Okta workflows, including API integrations, lifecycle events, MFA, and conditional access Experience with CyberArk PAM automation, including onboarding, credential rotation, and PSM session automation Experience automating AWS IAM Identity Center permission sets and account assignments Experience with AWS Managed Microsoft AD delegated administration and group management, and AD LDS for partner or external identity stores Experience creating and tuning Splunk ES rules and developing Splunk SOAR playbooks for ICAM and Zero Trust actions Experience onboarding log sources for Okta, CyberArk, Zscaler, and related technologies Understanding of PDP, PEP, PIP, and PAP components Experience automating Zscaler ZPA/ZTNA and ZIA/SWG policies, developing AWS Verified Access policies, and integrating device trust and posture signals Preferred: Python and/or PowerShell skills for automation and API development Preferred: Experience troubleshooting SAML 2.0/OIDC federation and with FIDO2, CAC/PIV, and hardware-token authentication workflows Preferred: Knowledge of ABAC models, including SAP-specific attributes Preferred: Familiarity with myAuth (okta.mil) and DoD IdP integrations Responsibilities: Develop and automate ICAM workflows for user lifecycle management, MFA enrollment, and conditional access policies Build and maintain integrations across Okta, CyberArk, AWS IAM Identity Center, and Active Directory environments Create and improve SOC and Zero Trust automation, including Splunk ES detection rules and Splunk SOAR playbooks Automate security actions such as session revocation, access removal, credential rotation, and incident ticket creation Support log-source onboarding, parsing, and enrichment for IAM and security platforms Design and implement Zero Trust policies using Zscaler ZPA/ZIA, AWS Verified Access, and device trust signals Collaborate with engineering, SOC, and identity teams to improve automation, consistency, and security outcomes Technologies: API AWS Active Directory Cloud Hardware IAM Support PowerShell Python SAML SAP Security Splunk DevOps ServiceNow More: We are hiring a full-time ICAM Automation Engineer to support Cyber 2 operations on our mission-driven cybersecurity team, advancing Zero Trust and modern identity, credential, and access management automation. The role offers the opportunity to build secure, scalable workflows using IAM, SOC automation, and cloud tools. It is a regular position with up to 10% local travel. At CACI, we value integrity, innovation, trust, and continuous growth. We offer flexible time off, learning and development resources, competitive compensation, and benefits supporting healthcare, wellness, financial and retirement needs, family support, continuing education, and time off. The proposed national-average salary range is $63,300–$129,700; final compensation may vary based on factors such as location, experience, skills, education, and certifications. We are an equal opportunity employer and consider qualified applicants without regard to protected characteristics. last updated 42 week of 2026