Systems Engineer (DevSecOps and ICAM)
Tetrad Digital Integrity LLC1 month ago
Arlington, VA, USASenior
Base Salary
$115k - $125k/yr
Responsibilities
- Engineer, deploy, integrate, secure, and maintain ForgeRock IdP and ICAM components.
- Apply DevSecOps automation practices to ICAM services, including automated provisioning, configuration-as-code, and repeatable deployment patterns.
- Integrate ICAM services with enterprise directories, federation services, Zero Trust controls, and cross-domain workflows.
- Implement SSO, SAML, OAuth2, OIDC, authentication flows, policy enforcement, and identity lifecycle workflows.
- Perform systems integration, API-based connector development, automated provisioning and deprovisioning, and secure-enclave workflow automation.
- Administer and troubleshoot Linux-based ICAM components, including hardening, monitoring, log analysis, performance tuning, and root-cause analysis.
- Collaborate on secure identity architecture aligned with DoD and DISA standards.
- Create and maintain version-controlled CONOPS, SOPs, API documentation, workflow diagrams, metrics, reports, and dashboards.
- Support audits, ATO activities, internal control assessments, risk management, compliance, and continuous improvement.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, or a related discipline, or equivalent experience in lieu of a degree.
- 8+ years of systems engineering experience.
- Active Top Secret clearance with SCI eligibility.
- Ability to obtain and maintain a CI Poly and Special Program Access.
- IAT Level II certification or higher, such as Security+ CE, CySA+, SSCP, or CISSP.
- Hands-on experience with federation technologies including SAML and OAuth2 and with Zero Trust identity principles.
- Experience engineering or administering ForgeRock AM, IDM, and DS.
- Strong understanding of ICAM, identity lifecycle management, and enterprise access controls.
- Experience with Windows and Linux systems administration, shell scripting, and troubleshooting.
- Preferred experience supporting DISA or DoD mission partners.
- Preferred active TS/SCI with CI Poly.
- Preferred experience with JISG Access Controls, AWS cloud engineering and security services, Ansible, GitLab, or Jenkins.
Benefits
- Onsite five days per week in Arlington, Virginia.
- Requires an active Top Secret clearance and SCI eligibility, with the ability to obtain a CI Poly and Special Program Access.
- Employment is restricted to US citizens or lawful permanent residents.
- Equal opportunity employer.
About Tetrad Digital Integrity LLC
Tetrad Digital Integrity (TDI) provides cybersecurity software and services for enterprises and U.S. government agencies. Its business centers on Cybersecurity Performance Management delivered through the CnSight platform and a managed CPM service that measures security performance, compliance, and risk. Founded in 2001 and headquartered in Washington, DC, this privately held firm supports federal programs such as DISA’s GSM-O II and offers penetration testing, web application security, digital forensics, and risk assessment.