Senior Zero Trust Identity and ICAM Engineer

Job overview

The Senior Zero Trust Identity and ICAM Engineer role is hybrid, with onsite and remote support required in the Washington, DC metro area. Compensation is $150,000–$185,000 per year. The engineer supports federal agency clients with Zero Trust Architecture programs. The role unifies access policy across identity, endpoint, network, and application layers, guiding architecture, implementation, and sustainment to strengthen enterprise security and meet federal requirements.

What you'll do

• Lead Zero Trust assessments, gap analyses, and roadmaps
• design and document architecture across five pillars
• translate federal mandates into implementation plans
• deploy and configure Zero Trust solutions
• design identity and access controls
• support compliance, authorization, and risk management
• advise federal stakeholders and coordinate with technical teams.

What we're looking for

Skills & competencies

senior engineer

zero trust

identity and access management

icam

cybersecurity

hybrid

washington dc

federal clients

palo alto

zscaler

microsoft entra id

$150k–$185k

Work arrangement

• Weekend coverage required

Benefits & perks

• 401(k), competitive salary, dental and health insurance, paid time off, training and development.

Why this role

Solution-agnostic architecture role requiring expertise in at least one of Palo Alto Prisma, Zscaler, or Microsoft Zero Trust platforms; active secret clearance is not stated, unlike the separate security-engineer listing.

About the employer

CELESTIAL INNOVATIONS GROUP LLC is hiring for this role. Industry: Engineering Services. Sector: 54.