ICAM Automation Engineer (Remote)

About the role

CACI is hiring a full-time, remote ICAM Automation Engineer to join a cybersecurity team focused on Zero Trust and modern Identity, Credential and Access Management (ICAM) automation. The engineer supports Cyber 2 operations by designing and building secure, scalable workflows that strengthen the enterprise security posture, working with IAM, SOC automation and cloud environments.

Key responsibilities

• Develop and automate ICAM workflows, including user lifecycle management, MFA enrollment and conditional access policy automation.
• Build and maintain integrations across Okta, CyberArk, AWS IAM Identity Center and Active Directory.
• Create and enhance SOC and Zero Trust automation, including Splunk ES detection rules and Splunk SOAR playbooks.
• Automate security actions such as session revocation, access removal, credential rotation and incident ticket generation.
• Support log source onboarding, parsing and enrichment for IAM and security platforms.
• Design and implement Zero Trust policies involving Zscaler ZPA/ZIA, AWS Verified Access and device trust signals.
• Collaborate with engineering, SOC and identity teams to improve automation, consistency and security outcomes.

Required profile

• Interim Secret clearance (minimum).
• DoD 8140 Foundational Intermediate, 671 System Testing and Evaluation Specialist (tentative).
• 4+ years of experience in IAM automation, security orchestration or SOC operations.
• One or more of the listed certifications (CEH, CFR, Cloud+, GSEC, PenTest+, Security+, SSCP).

Required skills

• Okta automation (API integrations, lifecycle events, MFA workflows, conditional access)
• CyberArk PAM automation (onboarding, credential rotation, PSM session automation)
• AWS IAM Identity Center permission sets and account assignments
• AWS Managed Microsoft AD delegated administration and group management
• Splunk ES rule creation and tuning, Splunk SOAR playbook development
• Zero Trust architecture and Zscaler ZPA/ZIA automation
• Desired: Python or PowerShell, SAML 2.0 / OIDC troubleshooting, FIDO2/CAC/PIV, ABAC models, myAuth and DoD IdP integrations

What we offer

• Proposed pay range of $63,300-$129,700, depending on location, experience and skills.
• Healthcare, wellness, financial, retirement, family support, continuing education and time off benefits.
• Flexible time off and learning resources.