Identity & Access Management (ICAM) Architect (TS/SCI Clearance Required)

North Point Technology is looking to hire an ICAM Architect to support the GEOAxIS modernization effort. The qualified candidate must have an active Top Secret (TS) security clearance and be eligible for SCI access, and will provide the technical architectural oversight that keeps the modernization of legacy ICAM capabilities - Policy Enforcement Points, Policy Information Points, Enterprise Management Services, and Resource and Policy Management Services - strategically aligned, secure, and extensible. The ideal candidate has deep experience defining target architectures, guiding engineering teams, and mapping legacy-to-modern transitions across on-prem and cloud-ready environments.

This program requires employees to have an active TS clearance with eligibility to obtain SCI and CI Poly. 

 If you have a Full Scope Poly, working this program will keep your Full Scope ACTIVE.

Responsibilities:

This position provides architectural leadership across the PEP/PIP, EMS, and RPMS modernization, ensuring alignment with NGA's Zero Trust and ICAM strategic framework and guiding the transition from the legacy PDP to JBlocks. Duties include developing end-to-end architectural patterns for identity, attribute services, authorization flows, and policy distribution; partnering with the Technical Lead to validate modernization roadmaps and integration strategies for microservices-based components; translating mission needs into technical requirements, sequence diagrams, data models, and interface specifications; designing modern PEP/PIP interfaces that support attribute-based access control and dynamic policy evaluation; architecting EMS and RPMS capabilities such as resource registration and policy lifecycle automation; providing guidance to DevOps and software teams on scalability, resilience, and security; conducting architectural reviews, risk assessments, and compliance verification; and serving as a senior technical advisor to program management. This is a short-term assignment with an expected duration of six months.

Required Skills/Experience:

• Experience as a solutions architect, systems architect, or enterprise architect on complex modernization, security, or ICAM programs
• Experience designing distributed systems, microservices architectures, and cloud-native solutions
• Experience leading or supporting teams engaged in ICAM modernization, enterprise identity, or authorization and policy services
• Experience with Agile methodologies, Program Increment (PI) planning, and architectural runway development

Preferred Skills/Experience:

• Experience with Kubernetes, OpenShift, or container orchestration platforms
• Experience with Java and/or Python for modern development and integration
• Knowledge of GitOps tools for managing modern environments
• Expertise with identity and authorization standards (X.509, SAML, OAuth2, OIDC, LDAP)
• Experience architecting ICAM solutions on Oracle or other enterprise-grade identity platforms
• Experience defining ABAC/RBAC models, policy-as-code, and Zero Trust-aligned access patterns
• Prior experience supporting NGA or Intelligence Community identity and authorization systems
• Certification in an enterprise architecture framework (e.g., TOGAF)

Qualifications:

• Active Top Secret security clearance; SCI eligibility required
• Ability to obtain a CI polygraph after hire
• Ability to obtain a DoD 8570-compliant certification (e.g., Security+) within 90 days of hire