TECHNOLOGY ECOSYSTEM EXPERIENCE Candidates are expected to bring experience with the following platforms, with cross-platform fluency strongly preferred: Intercede MyID CMS Enterprise: Credential profiles, enrollment workflows, Smartcard issuance, certificate provisioning, renewal, revocation, and integration with PKI and enterprise identity services Microsoft Identity and Zero Trust: Microsoft Entra ID (Azure AD), Entra Certificate Based Authentication (CBA), Conditional Access, Intune/MEM, Microsoft Defender suite, Sentinel SIEM/SOAR, Purview data governance, M365 compliance center Zero Trust Platforms: Palo Alto Networks (Prisma), and the CISA Zero Trust Maturity Model five-pillar maturity assessment Additional Enterprise Tooling: SCCM, Workspace ONE (WS1), Qualys vulnerability management, and Cisco network/wireless fabric, supporting device posture enforcement REQUIRED QUALIFICATIONS Experience 5+ years of experience in cybersecurity engineering, network security, or IT infrastructure roles. POSITION SUMMARY Celestial Innovations Group (CIG) is seeking an Identity, Credential, and Access Management (ICAM) Specialist to deliver Enterprise ICAM support services for federal agency clients, with priority focus on PIV-enabled logical access implementation across enterprise systems.