Job Information
KBR Lead Architect – Identity, Credential, and Access Management (ICAM) in Beavercreek Township, Ohio
Title:
Lead Architect – Identity, Credential, and Access Management (ICAM)
Belong. Connect. Grow. with KBR!
KBR is seeking a Lead Architect for Identity, Credential, and Access Management (ICAM) to lead the design, integration, and modernization of enterprise identity solutions supporting mission-critical systems within NASIC. This role serves as the technical lead for AFISRE and drives Zero Trust identity capabilities across NASIC and the AF enterprise in support of Air Force Digital Transformation initiatives. The ideal candidate will bring deep expertise in identity security, cloud-native architectures, and DevSecOps, with the ability to lead both technical teams and customer engagements. Key Responsibilities:Serve as the enterprise technical lead for ICAM architecture, engineering, and integrationDesign and Execute the ICAM strategy, roadmap, and modernization initiativesArchitect and implement Zero Trust identity and access management solutionsDesign authentication, authorization, federation, and identity governance capabilitiesIntegrate ICAM solutions across multi-domain, cloud, and mission system environmentsProvide subject matter expertise in privileged access management (PAM) and identity governanceEnsure compliance with DoD, NIST, and Intelligence Community standards and frameworksLead and mentor engineering teams, architects, and developersEngage directly with government stakeholders and mission partnersSupport secure identity integration across data platforms, applications, and enterprise servicesLead customer engagementAny other tasks closely associated with the performance of duties listed above
Required Qualifications:
Active Top Secret/SCI (TS/SCI) clearanceBachelor’s degree in a STEM field with 15+ years of relevant experienceDeep understanding of Zero Trust, Identity-as-a-Service (IDaaS), and modern access control modelsExtensive experience designing and implementing enterprise ICAM solutions and PKIStrong knowledge of Active Directory and enterprise identity servicesExperience with authentication and federation protocols (SAML, OAuth 2.0, OpenID Connect)Proven experience architecting cloud-based environments (AWS, Azure)Hands-on experience with containerization and orchestration (Docker, Kubernetes)Experience implementing DevSecOps practices and CI/CD pipelinesProficiency in Linux/Unix operating systemsDevelopment experience in Golang and PythonExperience with relational databases and SQL (MariaDB, PostgreSQL)Experience working in Agile development environmentsStrong written and verbal communication skillsAbility to operate effectively in a secure, in-person/closed-area environment
Desired Qualifications:
Experience with service mesh and identity platforms (Istio, Keycloak)Demonstrated expertise in cloud-native and DevSecOps ecosystems, including Helm, YAML, GitLab, and ArgoCDStrong knowledge of Active DirectoryExperience with SAML, OAuth 2.0, OpenID ConnectExperience implementing observability and monitoring solutions (Grafana, Prometheus)Familiarity with Open Policy Agent (OPA) and policy-as-code frameworksWeb development experience using React, TypeScript, Angular, with a focus on UI/UXExperience architecting and developing ICAM / Identity Security systems and softwareFamiliarity with cross-domain solutions and secure data transfer in classified environmentsDeep knowledge of Zero Trust frameworks, including:NIST SP 800-207NIST SP 800-63-4DoD Zero Trust Reference Architecture (v2.0)Relevant certifications such as CISSP, CISM, CASP+, Security+Agile certifications (CSM, CSPO, SAFe)Experience supporting large IDIQ contracts and federal acquisition processesExperience supporting DoD and/or Intelligence Community (IC) programs
Belong, Connect and Grow at KBRAt KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.