Systems Engineer (DevSecOps and ICAM) with Security Clearance

GCyber is seeking a Systems Engineer (DevSecOps and ICAM) to help support our government customer. The Systems Engineer will contribute to the engineering, deployment, automation, and sustainment of an Identity-as-a-Service (IDaaS) platform that underpins CESO's Zero-trust Architecture and cross-domain capabilities. The engineer will work hands-on with Ping Identity components, enterprise directory services, automated pipeline, and large-scale ICAM integration patterns across secure environments. As the Systems Engineer (DevSecOps and ICAM), you will:

• Engineer, deploy, integrate, secure, and maintain ForgeRock IdP/ICAM solutions in complex, mission-critical environments using DevSecOps practices, CI/CD pipelines, configuration-as-code, and automated provisioning.
• Design and implement enterprise identity services, including SSO, SAML, OAuth2, OIDC, identity federation, Zero Trust integration, API-based connectors, and automated identity lifecycle workflows.
• Collaborate with cybersecurity, development, and infrastructure teams to deliver secure ICAM architectures aligned with DoD, DISA, RMF, and enterprise security standards, supporting ATOs, audits, and compliance initiatives.
• Perform system hardening, monitoring, performance tuning, troubleshooting, and root-cause analysis for Linux-based ForgeRock components while ensuring service availability and SLA compliance.
• Develop engineering documentation, technical diagrams, SOPs, CONOPS, performance dashboards, and operational metrics to support continuous improvement and enterprise ICAM operations.

Minimum Qualifications and Experience:

• Active DoD Top Secret clearance with SCI eligibility
• Candidate must be willing to take and maintain a CI Poly and Special Program Access.
• BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree.)
• IAT II Certification (e.g. Security+, CySA+, GICSP, GSEC, SSCP)
• Hands-on experience with federation technologies (SAML, OAuth@, OpenID Connect) and Zero-Trust identity principles.
• Experience engineering or administering the ForgeRock platform (AM, IDM, DS)
• Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
• Experience with Windows and Linux systems administration, shell scripting, system tuning, and troubleshooting
• Ability to work across highly technical and non-technical teams in a fast-paced environment.
• Experience with any of the following preferred:
• JISG Access Controls
• AWS cloud engineering, IAM, and security services
• Ansible playbooks and automated configuration management
• CI/CD pipeline (GitLab, Jenkins, etc.)
• API gateway, identity orchestration, or cross-domain service integrations patterns.