ICAM Identity Provider (IdP) Engineer – Enterprise Authentication Services

🕒 August 6

🇺🇸 United States – Remote

💵 $170k - $230k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

General Dynamics Information Technology

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1954

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

General Dynamics Information Technology is a company at the forefront of technological innovation, offering a wide range of services including consulting, digital modernization, and application services. The company is heavily involved in implementing solutions related to artificial intelligence, cloud computing, cybersecurity, high-performance computing, and quantum technologies. GDIT is committed to supporting government and defense sectors, providing mission-critical services such as logistics and supply chain management, intelligence, and homeland security. The company also focuses on diverse and inclusive hiring practices and actively promotes employee well-being. Through its digital accelerator solutions and pioneering use of emerging technologies, GDIT aims to propel agencies' missions forward and address complex technological challenges.

📋 Description

• Design, develop, configure, and maintain enterprise Identity Provider services supporting over 4 million identities • Engineer, administer, and sustain Microsoft Active Directory Federation Services infrastructure • Configure and maintain federation trust relationships with Identity Providers, Service Providers, and mission partners • Design, implement, and troubleshoot SAML 2.0, OAuth 2.0, OpenID Connect, WS-Federation, and certificate-based authentication solutions • Support enterprise application onboarding and integration • Develop authentication policies, claims rules, attribute mappings, token issuance policies, and authorization workflows • Support SSO, MFA, Conditional Access, and phishing-resistant authentication • Collaborate with cybersecurity, Active Directory, cloud, infrastructure, and application teams • Support Zero Trust Architecture implementation • Monitor, troubleshoot, and resolve authentication, federation, trust, certificate, token, and identity assertion issues • Engineer highly available and resilient authentication services • Develop architecture diagrams, integration guides, SOPs, TTPs, operational procedures, and onboarding documentation • Participate in Agile development and continuous service improvement • Manage technical risks and contribute to identity modernization efforts

🎯 Requirements

• Active Secret Clearance required; interim Secret Clearances are not allowed • US Citizenship required • Bachelor’s Degree in a related technical discipline, or equivalent combination of education, technical certifications or training, or work experience • DoD 8570/8140 IAT Level II certification, Security+ CE or higher, required • Minimum 8 years of experience supporting IAM, authentication, federation, or ICAM solutions in government or regulated environments • Strong experience with Microsoft Active Directory Federation Services • Extensive experience implementing enterprise IdP services for large user populations • Understanding of authentication, authorization, federation, and identity assurance • Experience with SAML 2.0, OAuth 2.0, OpenID Connect, WS-Federation, and JWT • Experience with PKI, certificate-based authentication, smart card authentication, and MFA • Experience integrating applications, APIs, and enterprise services with federation platforms • Experience with Active Directory, LDAP directories, and enterprise identity repositories • Experience configuring claims, attribute mappings, policy enforcement, token transformations, and federation workflows • Experience supporting Linux and/or Windows Server environments • Experience deploying and supporting enterprise COTS products in secure customer environments • Experience working in Agile development environments and associated tools • Strong written and verbal communication skills • Ability to drive complex technical efforts to completion • Desired: highly available ADFS farms, WAP, load balancing, disaster recovery, Microsoft Entra ID, Ping platforms, Okta, Keycloak, DoD ICAM, NIST 800-63, phishing-resistant/passwordless authentication, Zero Trust, PowerShell, enterprise monitoring, AD CS, Docker, Kubernetes, DoD PKI, CAC, derived credentials, and certificate lifecycle management

🏖️ Benefits

• AI-powered career tool identifying career steps and learning opportunities • Internal mobility team focused on career goals • Comprehensive benefits and wellness packages • 401(k) with company match • Competitive pay • Paid time off • Full-flex work week • Vacation, sick, and personal time • Paid holidays • Paid parental, military, bereavement, and jury duty leave • Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees • Medical plan options, some with Health Savings Accounts • Dental plan options • Vision plan • Short- and long-term disability benefits • Life insurance • Accidental death and dismemberment insurance • Personal accident insurance • Critical illness insurance • Business travel and accident insurance • Award-winning culture of innovation • Military-friendly workplace