Start searching
Back to Jobs
Recently postedEmployeeTechnology

Systems Engineer (DevSecOps and ICAM) with Security Clearance

RMantrasArlington, VA🇺🇸United States

Quick overview

SeniorityMid Senior
Employment typeEmployee
Work modeOn Site
LocationArlington, VA, United States
ShellGitAWSAPI GatewaySAMLSSOAnsibleJenkinsZero TrustCI/CDLinuxIAM

Job description

This position is 100% Onsite. This position is in Arlington, VA, with occasional/situational travel. Certificate IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).

Location: Arlington, VA Schedule 100% onsite Clearance US Citizens with Top Secret/SCI Responsibilities Qualifications

  • Engineer, deploy, integrate, secure, and maintain ForgeRock IdP/ICAM components within complex, mission‑critical environments.
  • Apply DevSecOps practices—including CI/CD pipelines, automated provisioning, configuration-as-code, and repeatable deployment patterns—to ICAM services.
  • Integrate ICAM services with enterprise directory architecture, federation services, Zero Trust controls, and cross‑domain workflows.
  • Implement and maintain access management functions including SSO, identity federation (SAML, OAuth2, OIDC), authentication flows, and policy enforcement.
  • Collaborate with cybersecurity, development, and infrastructure teams to design secure identity solutions aligned with DoD and DISA standards.
  • Conduct system hardening, monitoring, log analysis, and performance tuning across Linux‑based ICAM components.
  • Perform systems integration tasks such as API‑based connectors, service integrations, and automated provisioning/deprovisioning workflows.
  • Support architectural reviews, internal control assessments, and risk management activities related to ICAM operations.
  • Diagnose and resolve escalated ForgeRock/ICAM issues within defined SLAs, including root‑cause analysis and corrective action development.
  • Create, maintain, and version-control engineering documentation including CONOPS, SOPs, API interface documentation, and workflow diagrams.
  • Provide input to audits, ATO support, compliance adherence, and continuous improvement initiatives.
  • Develop and maintain ICAM performance metrics, identity lifecycle reports, and engineering dashboards.
  • Partner with development teams to automate user, group, and credential workflows across secure enclaves.

Basic Qualifications

  • BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree).
  • Active TS clearance with SCI eligibility
  • Ability to obtain and maintain a CI Poly and Special Program Access.
  • IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
  • Hands‑on experience with federation technologies (SAML, OAuth2, OpenID Connect) and Zero‑Trust identity principles.
  • Experience engineering or administering the ForgeRock platform (AM, IDM, DS).
  • Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
  • Experience with Windows and Linux systems administration, shell scripting, system tuning, and troubleshooting.
  • Ability to work across highly technical and non‑technical teams in a fast‑paced environment.
  • Strong communication skills and the ability to translate complex identity/security concepts to diverse audiences.

Preferred Qualifications • Experience supporting DISA or DoD mission partners.

  • Active TS/SCI with CI Poly preferred.
  • Experience with any of the following:
– JISG Access Controls
– AWS cloud engineering, IAM, and security services
– Ansible playbooks and automated configuration management
– CI/CD pipelines (GitLab, Jenkins, etc.)
– API gateway, identity orchestration, or cross‑domain service integration patterns If you are interested, please send an email to

Similar jobs

Apply