1 day ago
Gaithersburg, MD, USA or Eagan, MN, USAMid Level
H1B sponsor
Base Salary
$87k - $157k/yr
Responsibilities
- Integrate L-CAP services with government ICAM services using OAuth 2.0 and OpenID Connect, including token issuance, validation, introspection, and claims mapping.
- Implement identity federation, user stores, authentication, session management, and role-based test account provisioning.
- Enforce per-session authentication and authorization, default-deny access, RBAC/ABAC policies, and service-to-service access controls.
- Implement mTLS, service mesh and workload identity, and certificate issuance, rotation, expiration monitoring, and revocation.
- Implement authentication and authorization audit logging, API gateway authorization, and protection of external-facing endpoints.
- Produce ICAM control evidence, support security authorization and continuous monitoring, resolve distributed identity integration issues, and use AI-assisted development and automation.
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field with 4+ years of relevant experience; additional experience, education, and training may substitute for the degree.
- Hands-on OAuth 2.0 and OpenID Connect experience, including token validation, introspection, and claims mapping.
- Experience with enterprise identity providers and federation such as Keycloak, Okta, Ping, or Microsoft Entra ID.
- Experience implementing RBAC and/or ABAC, audit logging, PKI and certificate lifecycle management, mTLS, service mesh identity, or Zero Trust controls.
- Proficiency in Java, Python, Go, or a comparable programming or scripting language, plus Kubernetes and containerized service deployment experience.
- Working knowledge of NIST SP 800-53 Access Control and Audit and Accountability controls.
- U.S. citizenship and the ability to obtain and maintain Public Trust clearance and required government background investigations.
- Ability to meet FAA facility and information-system access requirements, including continuous U.S. residency for at least 3 of the previous 5 years.
- Preferred qualifications include Security+ CE, CySA+, or equivalent DoD 8570 IAT Level II certification; federal ICAM/FICAM, PIV/CAC, SAML 2.0, SCIM, Kubernetes RBAC, SPIFFE/SPIRE, Istio, Linkerd, Kong, Apigee, cryptographic module, HSM, key-management, privileged-access-management, aviation, or safety-critical experience.
Benefits
- Hybrid work requires 3 days onsite and 2 days working from home for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ, with possible 100% remote consideration otherwise.
- The role supports mission-critical government and national-infrastructure systems and offers work with responsible AI-assisted engineering and automation.
Tech Stack
Categories
About Leidos
Leidos builds and operates technology and engineering solutions for defense, intelligence, civil, and health agencies, including systems integration, cyber, enterprise IT, sensors, and healthcare IT. It primarily sells through government contracts and long-term programs, plus managed services and mission software. Founded in 1969 and headquartered in Reston, Virginia, Leidos is a Fortune 500 public company on the NYSE; customers include U.S. defense and intelligence agencies and civil bodies such as the FAA.