1 day ago
Base Salary
$108k - $195k/yr
Responsibilities
- Engineer, deploy, integrate, secure, and sustain ForgeRock IdP and ICAM components in mission-critical environments.
- Apply DevSecOps automation practices to ICAM services, including automated provisioning, configuration-as-code, and repeatable deployment patterns.
- Integrate ICAM with enterprise directories, federation services, Zero Trust controls, and cross-domain workflows.
- Implement SSO, SAML, OAuth2, OpenID Connect, authentication flows, policy enforcement, and identity lifecycle processes.
- Perform system hardening, monitoring, log analysis, performance tuning, troubleshooting, and root-cause analysis across Linux-based ICAM systems.
- Develop API-based connectors, service integrations, and automated user, group, credential, provisioning, and deprovisioning workflows.
- Support architectural reviews, control assessments, audits, ATO activities, compliance, risk management, and continuous improvement.
- Create and maintain CONOPS, SOPs, API documentation, workflow diagrams, performance metrics, lifecycle reports, and engineering dashboards.
- Collaborate with cybersecurity, development, infrastructure, and mission teams to deliver secure identity solutions aligned with DoD and DISA standards.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, or a related discipline, or equivalent experience in lieu of a degree.
- 8+ years of systems engineering experience.
- Active TS clearance with SCI eligibility; ability to obtain and maintain a CI Poly and Special Program Access.
- IAT Level II certification or higher, such as Security+ CE, CySA+, SSCP, or CISSP.
- Hands-on experience with SAML, OAuth2, OpenID Connect, Zero Trust identity principles, and enterprise access controls.
- Experience engineering or administering ForgeRock AM, IDM, and DS.
- Experience with Windows and Linux administration, shell scripting, system tuning, troubleshooting, and identity lifecycle management.
- Preferred experience supporting DISA or DoD mission partners and holding active TS/SCI with CI Poly.
- Preferred experience with JISG Access Controls, AWS cloud engineering and security services, Ansible, GitLab, Jenkins, API gateways, identity orchestration, or cross-domain service integration.
Benefits
- The position is 100% on-site in Arlington, Virginia.
- The role supports a defense mission and requires an active TS clearance with SCI eligibility, with additional CI Poly and Special Program Access requirements.
About Leidos
Leidos builds and operates technology and engineering solutions for defense, intelligence, civil, and health agencies, including systems integration, cyber, enterprise IT, sensors, and healthcare IT. It primarily sells through government contracts and long-term programs, plus managed services and mission software. Founded in 1969 and headquartered in Reston, Virginia, Leidos is a Fortune 500 public company on the NYSE; customers include U.S. defense and intelligence agencies and civil bodies such as the FAA.