ICAM Identity Provider Engineer – Enterprise Authentication Services

Stelle nicht auf LinkedIn

🕒 vor 11 Tagen

🇺🇸 Vereinigte Staaten – Remote

💵 $170.000 - $230.000 / Jahr

⏰ Vollzeit

🟠 Senior

🔴 Experte

👷🏻‍♀️ Ingenieur

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

👻 Geisterscore 0%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

General Dynamics Information Technology

WebsiteLinkedInAlle Stellen

10.000+ Mitarbeiter

Gegründet 1954

💼 Beratung

🏥 Gesundheitswesen

📦 Logistik

Consulting • Healthcare • Logistics

General Dynamics Information Technology ist ein Unternehmen an der Spitze technologischer Innovationen und bietet ein breites Spektrum an Leistungen, darunter Beratung, digitale Modernisierung und Application Services. Das Unternehmen treibt die Umsetzung von Lösungen in den Bereichen künstliche Intelligenz (AI/ML), Cloud Computing, Cybersecurity, High Performance Computing (HPC) und Quantentechnologien voran. GDIT ist darauf ausgerichtet, den Regierungs- und Verteidigungssektor zu unterstützen und erbringt missionskritische Services wie Logistik und Supply-Chain-Management, nachrichtendienstliche Aufklärung sowie innere Sicherheit. Das Unternehmen legt zudem Wert auf vielfältige und inklusive Einstellungspraktiken und fördert aktiv das Wohlbefinden der Mitarbeitenden. Mit seinen Digital-Accelerator-Lösungen und dem wegweisenden Einsatz aufkommender Technologien will GDIT die Missionen von Behörden vorantreiben und komplexe technologische Herausforderungen adressieren.

Beschreibung

• Design, develop, configure, and maintain enterprise Identity Provider (IdP) services supporting over 4 million enterprise identities • Engineer, administer, and sustain Microsoft Active Directory Federation Services (ADFS) infrastructure • Configure and maintain federation trust relationships with internal and external IdPs, SPs, and mission partners • Design, implement, and troubleshoot authentication solutions using SAML 2.0, OAuth 2.0, OpenID Connect, WS-Federation, and certificate-based authentication • Support onboarding and integration of enterprise applications into the authentication and federation ecosystem • Develop authentication policies, claims rules, attribute mappings, token issuance policies, and authorization workflows • Support SSO, MFA, Conditional Access, and phishing-resistant authentication capabilities • Collaborate with cybersecurity, Active Directory, cloud, infrastructure, and application teams • Support Zero Trust Architecture implementation • Monitor, troubleshoot, and resolve authentication, federation, trust, certificate, token, and identity assertion issues • Engineer highly available and resilient authentication services for mission-critical applications • Develop architecture diagrams, integration guides, SOPs, TTPs, operational procedures, and onboarding documentation • Participate in Agile development and continuous service improvement • Manage technical risks and contribute to enterprise identity modernization efforts

🎯 Anforderungen

• Active Secret Clearance required; interim Secret Clearances are not allowed • U.S. citizenship required • Bachelor’s Degree in a related technical discipline, or equivalent combination of education, technical certifications or training, or work experience • DoD 8570/8140 IAT Level II certification, Security+ CE or higher, required • Minimum 8 years of experience supporting IAM, authentication, federation, or ICAM solutions in government or regulated environments • Strong experience designing, implementing, and supporting Microsoft ADFS • Extensive experience implementing enterprise IdP services for large user populations • Strong understanding of authentication, authorization, federation, and identity assurance • Experience with SAML 2.0, OAuth 2.0, OpenID Connect, WS-Federation, and JWT • Experience with PKI, certificate-based authentication, smart cards, and MFA • Experience integrating applications, APIs, and enterprise services with federation platforms • Experience with Active Directory, LDAP directories, and enterprise identity repositories • Experience configuring claims, attribute mappings, policy enforcement, token transformations, and federation workflows • Experience supporting Linux and/or Windows Server environments • Experience deploying and supporting enterprise COTS products in secure customer environments • Experience working in Agile development environments and associated tools • Strong written and verbal communication skills • Ability to drive complex technical efforts to completion • Desired: highly available ADFS farms with WAP, load balancing, and disaster recovery • Desired: Microsoft Entra ID, PingFederate, PingAccess, PingDirectory, Okta, Keycloak, or similar platforms • Desired: DoD Enterprise ICAM, Federation Hub, or mission partner federation • Desired: coalition, partner, or cross-organizational federation • Desired: NIST 800-63 IAL, AAL, and FAL • Desired: phishing-resistant and passwordless authentication • Desired: Zero Trust Architecture and identity-centric security • Desired: PowerShell scripting and automation • Desired: monitoring, performance tuning, and capacity planning for services supporting millions of identities • Desired: Active Directory Certificate Services and enterprise PKI • Desired: Docker and Kubernetes • Desired: DoD PKI, CAC authentication, derived credentials, and certificate lifecycle management • Desired: highly available mission-critical authentication environments

🏖️ Vorteile

• Comprehensive benefits and wellness packages • 401(k) with company match • Competitive pay • Paid time off • AI-powered career tool identifying career steps and learning opportunities • Internal mobility team focused on career goals • Full-flex work week • Medical plan options, some with Health Savings Accounts • Dental plan options • Vision plan options • Ability to contribute pre-tax and post-tax to 401(k) up to IRS annual limits • Vacation, sick, and personal time • Paid holidays • Paid parental leave • Military leave • Bereavement leave • Jury duty leave • 15 days of paid leave per calendar year for new employees • 10 paid holidays per year • Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees • Short- and long-term disability benefits • Life insurance • Accidental death and dismemberment insurance • Personal accident insurance • Critical illness insurance • Business travel and accident insurance • Award-winning culture of innovation • Military-friendly workplace