ICAM Identity Provider Engineer – Enterprise Authentication Services

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, configure, and maintain enterprise Identity Provider services that support over 4 million enterprise identities.

• Engineer, administer, and sustain the infrastructure for Microsoft ADFS.

• Configure and uphold federation trust relationships with both internal and external IdPs, SPs, and mission partners.

• Design, implement, and troubleshoot authentication solutions utilizing SAML 2.0, OAuth 2.0, OIDC, WS-Federation, and certificate-based authentication.

• Facilitate the onboarding and integration of enterprise applications into the authentication and federation ecosystem.

• Develop authentication policies, claims rules, attribute mappings, token issuance policies, and authorization workflows.

• Support SSO, MFA, Conditional Access, and phishing-resistant authentication capabilities.

• Collaborate with teams in cybersecurity, Active Directory, cloud, infrastructure, and applications.

• Promote Zero Trust Architecture through modern authentication, federation, and identity assurance.

• Monitor, troubleshoot, and resolve intricate issues related to authentication, federation, trust, certificates, tokens, and identity assertions.

• Engineer highly available and resilient authentication services for mission-critical applications.

• Create architecture diagrams, integration guides, SOPs, TTPs, operational procedures, and onboarding documentation.

• Engage in Agile development and continuous service improvement initiatives.

• Manage technical risks while contributing to enterprise identity modernization efforts.

⛳️ Requirements

• Active Secret Clearance at a minimum; interim Secret Clearances are not acceptable.

• U.S. citizenship is required.

• Bachelor’s Degree in a relevant technical field, or an equivalent combination of education, technical certifications or training, or work experience.

• DoD 8570/8140 IAT Level II certification (Security+ CE or higher).

• At least 8 years of experience in supporting IAM, Authentication, Federation, or ICAM solutions within government or regulated environments.

• Strong proficiency with Microsoft Active Directory Federation Services (ADFS).

• Extensive background in implementing enterprise Identity Provider (IdP) services for large user populations.

• Robust understanding of authentication, authorization, federation, and identity assurance.

• Experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Federation, and JWT.

• Familiarity with PKI, certificate-based authentication, smart card authentication, and MFA.

• Experience integrating applications, APIs, and enterprise services with federation platforms.

• Knowledge of Active Directory, LDAP directories, and enterprise identity repositories.

• Experience in configuring claims, attribute mappings, policy enforcement, token transformations, and federation workflows.

• Experience supporting Linux and/or Windows Server environments.

• Experience deploying and supporting enterprise COTS products in secure customer environments.

• Proven experience in Agile development environments and related tools.

• Strong written and verbal communication skills.

• Self-starter with the ability to drive complex technical efforts to completion.

• Related experience should total 15+ years as listed in the job qualifications.

🏝️ Benefits

• Comprehensive medical plan options, including some with Health Savings Accounts.

• Dental plan options available.

• Vision plan included.

• 401(k) plan with company match offered.

• Flexibility for full work weeks wherever possible.

• Generous leave policies including vacation, sick, personal, holiday, paid parental, military, bereavement, and jury duty leave.

• Typically, 15 days of paid leave per calendar year.

• An additional 10 paid holidays each year.

• Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees.

• Short- and long-term disability benefits provided.

• Life insurance coverage.

• Accidental death and dismemberment insurance options.

• Personal accident insurance available.

• Critical illness insurance included.

• Business travel and accident insurance options.

• AI-powered career tool to identify career steps and learning opportunities.

• An internal mobility team to support career aspirations.

• Wellness packages offered.

• Competitive salary and compensation.

• Military-friendly workplace environment.

• Less than 10% travel required.