ICAM Identity Provider Engineer – Enterprise Authentication Services

Vaga não está no LinkedIn

🕒 Agosto 13

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $170.000 - $230.000 / ano

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

👷🏻‍♀️ Engenheiro

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

General Dynamics Information Technology

SiteLinkedInTodas as Vagas

10.000+ funcionários

Fundada em 1954

💼 Consultoria

🏥 Saúde

📦 Logística

Consulting • Healthcare • Logistics

A General Dynamics Information Technology é uma empresa na vanguarda da inovação tecnológica, oferecendo uma ampla gama de serviços, incluindo consultoria, modernização digital e serviços de aplicações. A empresa atua fortemente na implementação de soluções relacionadas a Inteligência Artificial (IA), Cloud Computing, Cybersecurity, High-Performance Computing (HPC) e tecnologias quânticas. A GDIT é comprometida em apoiar os setores governamental e de defesa, fornecendo serviços críticos para a missão, como logística e gestão da cadeia de suprimentos, inteligência e segurança interna. A empresa também prioriza práticas de contratação diversas e inclusivas e promove ativamente o bem-estar dos colaboradores. Por meio de suas soluções de aceleração digital e do uso pioneiro de tecnologias emergentes, a GDIT busca impulsionar as missões das agências e enfrentar desafios tecnológicos complexos.

Descrição

• Design, develop, configure, and maintain enterprise Identity Provider (IdP) services supporting over 4 million enterprise identities • Engineer, administer, and sustain Microsoft Active Directory Federation Services (ADFS) infrastructure • Configure and maintain federation trust relationships with internal and external IdPs, SPs, and mission partners • Design, implement, and troubleshoot authentication solutions using SAML 2.0, OAuth 2.0, OpenID Connect, WS-Federation, and certificate-based authentication • Support onboarding and integration of enterprise applications into the authentication and federation ecosystem • Develop authentication policies, claims rules, attribute mappings, token issuance policies, and authorization workflows • Support enterprise SSO, MFA, Conditional Access, and phishing-resistant authentication • Collaborate with cybersecurity, Active Directory, cloud, infrastructure, and application teams • Support Zero Trust Architecture through modern authentication, federation, and identity assurance capabilities • Monitor, troubleshoot, and resolve complex authentication, federation, trust, certificate, token, and identity assertion issues • Engineer highly available and resilient authentication services for mission-critical enterprise applications • Develop architecture diagrams, integration guides, SOPs, TTPs, operational procedures, and onboarding documentation • Participate in Agile development and continuous service improvement initiatives • Manage technical risks and contribute to enterprise identity modernization efforts

🎯 Requisitos

• Active Secret Clearance at minimum; interim Secret Clearances are not allowed • U.S. citizenship required • Bachelor’s Degree in a related technical discipline, or equivalent combination of education, technical certifications or training, or work experience • DoD 8570/8140 IAT Level II certification, such as Security+ CE or higher • Minimum of 8 years of experience supporting IAM, authentication, federation, or ICAM solutions in government or regulated environments • Strong experience designing, implementing, and supporting Microsoft ADFS • Extensive experience implementing enterprise IdP services for large user populations • Strong understanding of authentication, authorization, federation, and identity assurance • Experience with SAML 2.0, OAuth 2.0, OpenID Connect, WS-Federation, and JWT • Experience with PKI, certificate-based authentication, smart card authentication, and MFA • Experience integrating applications, APIs, and enterprise services with federation platforms • Experience with Active Directory, LDAP directories, and enterprise identity repositories • Experience configuring claims, attribute mappings, policy enforcement, token transformations, and federation workflows • Experience supporting Linux and/or Windows Server environments • Experience deploying and supporting enterprise COTS products in secure customer environments • Experience working in Agile development environments and associated tools • Strong written and verbal communication skills • Ability to independently drive complex technical efforts to completion • Desired: experience with highly available ADFS farms, WAP, load balancing, and disaster recovery • Desired: experience with Microsoft Entra ID, PingFederate, PingAccess, PingDirectory, Okta, Keycloak, or similar platforms • Desired: DoD Enterprise ICAM, Federation Hub, or mission partner federation experience • Desired: coalition, partner, or cross-organizational federation experience • Desired: NIST 800-63 IAL, AAL, and FAL experience • Desired: phishing-resistant and passwordless authentication experience • Desired: Zero Trust Architecture and identity-centric security experience • Desired: PowerShell scripting and automation familiarity • Desired: enterprise monitoring, performance tuning, and capacity planning experience • Desired: Active Directory Certificate Services and enterprise PKI experience • Desired: Docker and Kubernetes familiarity • Desired: DoD PKI, CAC authentication, derived credentials, and certificate lifecycle management familiarity • Desired: highly available, mission-critical enterprise authentication experience

🏖️ Benefícios

• AI-powered career tool identifying career steps and learning opportunities • Internal mobility team focused on career goals • Comprehensive benefits and wellness packages • 401(k) with company match • Competitive pay • Paid time off • Full-flex work weeks • Medical plan options, some with Health Savings Accounts • Dental plan options • Vision plan • Ability to contribute pre- and post-tax dollars to 401(k) up to IRS annual limits • Vacation, sick, personal, holiday, paid parental, military, bereavement, and jury duty leave • 15 days of paid leave per calendar year for new employees • 10 paid holidays per year • Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees • Short- and long-term disability benefits • Life insurance • Accidental death and dismemberment insurance • Personal accident insurance • Critical illness insurance • Business travel and accident insurance • Award-winning culture of innovation • Military-friendly workplace • Remote work