Support PIV-based authentication, SSO, OAuth/OIDC, and identity federation for enterprise apps. Register and onboard applications, implement RBAC/ABAC and least-privilege patterns, manage keys/tokens/certificates, troubleshoot identity/session issues, support mobile GFE authentication, build logging/alerts/dashboards, and produce procedural documentation and automated access audits.
Who we are:
Makpar is a comprehensive professional and technical solutions provider for the Federal government. We combine functional and technical expertise in cloud engineering, data management, cybersecurity and emerging technologies to deliver mission success. We build the right IT solution for government clients by partnering with them to understand their WHAT, WHY, and HOW. Using our signature consulting methodology that we call “The Makpar Way,” we help agencies navigate the ongoing changes in the Federal technology landscape. We succeed where others fail because of our connected and engaged workforce are dedicated to delivering success for our clients and the American people.
Our Mission: We solve complex problems for the Federal government to accelerate access to citizen services.
When it comes to excellence, we deliver. Learn more about our employer brand at makpar.com/careers.
The ICAM Integration Engineer will support PIV-based authentication, SSO, OAuth/OIDC, application registration, authorization, and logical access control services for USCIS, DHS HQ, other government agencies, and GFE mobile users. The role is focused on helping application teams integrate securely with USCIS ICAM services and improving least privilege, RBAC/ABAC, and access governance.
This role requires real identity integration experience. Generic cybersecurity experience is not enough.
Key Responsibilities
• Support PIV-based authentication and Single Sign-On for enterprise applications.
• Register new applications for SSO across multiple environments.
• Support major and minor enhancements requested by application teams.
• Implement and maintain ABAC and RBAC capabilities during user SSO sessions.
• Support least privilege enforcement, inactivity tracking, and just-in-time provisioning patterns.
• Schedule and support rotation of credentials, keys, tokens, and certificates.
• Troubleshoot SSO issues during and after application integration.
• Support mobile authentication for GFE mobile devices.
• Develop logging, safeguards, alerting, and dashboards for on-prem and cloud environments.
• Create and maintain procedural documents, knowledge base articles, and training materials for users, system owners, requesters, and ServiceNow operators.
• Develop automated access control audits and alerts.
• Enhance dashboards using Splunk, New Relic, AWS CloudWatch, or similar data sources.
• Register new applications for SSO across multiple environments.
• Support major and minor enhancements requested by application teams.
• Implement and maintain ABAC and RBAC capabilities during user SSO sessions.
• Support least privilege enforcement, inactivity tracking, and just-in-time provisioning patterns.
• Schedule and support rotation of credentials, keys, tokens, and certificates.
• Troubleshoot SSO issues during and after application integration.
• Support mobile authentication for GFE mobile devices.
• Develop logging, safeguards, alerting, and dashboards for on-prem and cloud environments.
• Create and maintain procedural documents, knowledge base articles, and training materials for users, system owners, requesters, and ServiceNow operators.
• Develop automated access control audits and alerts.
• Enhance dashboards using Splunk, New Relic, AWS CloudWatch, or similar data sources.
Required Qualifications
• Experience with enterprise SSO and identity federation.
• Experience with OAuth and OpenID Connect.
• Experience with PIV-based authentication or certificate-backed authentication.
• Experience implementing or supporting RBAC and/or ABAC.
• Experience supporting application onboarding/integration across multiple environments.
• Ability to troubleshoot identity, token, session, certificate, and access issues.
• Ability to obtain favorable EOD / suitability and maintain required USCIS access.
• U.S. citizenship likely required for DHS IT access unless waiver is granted — confirm before final posting.
• Experience with OAuth and OpenID Connect.
• Experience with PIV-based authentication or certificate-backed authentication.
• Experience implementing or supporting RBAC and/or ABAC.
• Experience supporting application onboarding/integration across multiple environments.
• Ability to troubleshoot identity, token, session, certificate, and access issues.
• Ability to obtain favorable EOD / suitability and maintain required USCIS access.
• U.S. citizenship likely required for DHS IT access unless waiver is granted — confirm before final posting.
Preferred Qualifications
• Experience with Shibboleth IdP or similar identity provider platforms.
• Experience with UAA, OAuth/OIDC token providers, LACS, ServiceNow, Splunk, New Relic, or CloudWatch.
• Prior DHS, USCIS, or federal ICAM experience.
• Experience supporting 100+ or 150+ application team environments.
• Experience with automated access reviews, least privilege, and policy governance.
• Experience with UAA, OAuth/OIDC token providers, LACS, ServiceNow, Splunk, New Relic, or CloudWatch.
• Prior DHS, USCIS, or federal ICAM experience.
• Experience supporting 100+ or 150+ application team environments.
• Experience with automated access reviews, least privilege, and policy governance.
Benefits:
At Makpar Corporation we understand that we all need to balance work and life – that is why we have a great benefits package, excellent training and career development opportunities, flexible work schedules along with a generous compensation package. At Makpar, we believe in keeping our employees happy, healthy and engaged. We pride ourselves in providing outstanding benefits, creating environments where employees are encouraged to be themselves, collaborate, and be inquisitive in order to achieve goals.
Start your career today and be a part of something meaningful!
Makpar is an Equal Opportunity Employer.
Similar Jobs
Artificial Intelligence • Cloud • Enterprise Web • Fintech • Software • Analytics • Infrastructure as a Service (IaaS)
Lead full sales cycle for Microsoft Azure enterprise accounts, generating pipeline via inbound/outbound and partner channels, collaborating with Microsoft and internal teams, forecasting in CRM, driving customer events, and advocating customer needs to shape product and GTM strategy in the FinOps space.
Top Skills:
AppsourceAWSAzure MarketplaceCRMGCPAzureMicrosoft Co-SellNops
Cloud • Information Technology • Security • Software • Cybersecurity
Lead end-to-end ServiceNow HRSD and WSD projects: gather requirements, design scalable solutions, perform no-code/low-code configurations (Flow Designer, HR services, notifications), coordinate IT and business stakeholders, develop test plans, and use data analysis to identify, prioritize, and resolve system issues and enhancements.
Top Skills:
Flow DesignerHrisNow AssistServicenow Hr Agent WorkspaceServicenow HrsdServicenow WsdWorkplace Suite
Healthtech
Lead and develop a multi-channel Member Support team to ensure SLA adherence and high CSAT. Coach agents, handle escalations, analyze metrics, maintain documentation, and collaborate cross-functionally to remove friction and improve member outcomes.
Top Skills:
FreshdeskIntercomZendesk
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
