ICAM Identity Provider (IdP) Engineer

Remotedxb; Dubai; On-site; AED 300,000 - 520,000; Full time

Benefits offered by this job

Medical Insurance

401(k) Plan

Paid Time Off

Family Leave

Job summary

GDIT is seeking a senior IAM engineer in the UAE to design and maintain enterprise IdP services supporting millions of identities. You will implement and mature ADFS infrastructure, forge federation with internal/external IdPs, and deploy SAML, OAuth, OIDC with robust MFA and conditional access.

The role requires силь collaboration with cybersecurity and cloud teams to enforce Zero Trust and resolve complex identity issues, plus producing architecture diagrams and SOPs.

Qualifications

• Active Secret Clearance required.
• IAT Level II certification (Security+ CE or higher).
• 8+ years of IAM/ICAM experience in government environments.
• Strong experience with Microsoft ADFS and enterprise IdP services.
• Proficiency with SAML 2.0, OAuth 2.0, OIDC, and JWT technologies.
• Experience with PKI, smart card authentication, and MFA.

Responsibilities

• Design, develop, configure, and maintain enterprise Identity Provider (IdP) services supporting over 4 million identities
• Engineer and sustain Microsoft Active Directory Federation Services (ADFS) infrastructure
• Configure federation trust relationships with internal and external IdPs and Service Providers
• Implement authentication solutions using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation
• Develop authentication policies, claims rules, and authorization workflows
• Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access
• Collaborate with cybersecurity and cloud teams to implement Zero Trust Architecture
• Monitor and resolve complex authentication, token, and identity assertion issues
• Create technical documentation including architecture diagrams and SOPs

Skills

Secret Clearance

IAT II

IAM/ICAM 8yrs

Microsoft ADFS

SAML 2.0

OAuth 2.0

OIDC

JWT

PKI & MFA

Docker

Kubernetes

Azure AD

PowerShell

Education

Bachelor's Degree

Equivalent Experience

Tools

PingFederate

Okta

Keycloak

Docker

Kubernetes

PowerShell scripting

Job description

Responsibilities

• Design, develop, configure, and maintain enterprise Identity Provider (IdP) services supporting over 4 million identities
• Engineer and sustain Microsoft Active Directory Federation Services (ADFS) infrastructure
• Configure federation trust relationships with internal and external IdPs and Service Providers
• Implement authentication solutions using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation
• Develop authentication policies, claims rules, and authorization workflows
• Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access
• Collaborate with cybersecurity and cloud teams to implement Zero Trust Architecture
• Monitor and resolve complex authentication, token, and identity assertion issues
• Create technical documentation including architecture diagrams and SOPs

Requirements

• Active Secret Clearance (Interim not allowed)
• Bachelor's Degree in a related technical discipline or equivalent experience
• DoD 8570/8140 IAT Level II certification (Security+ CE or higher)
• Minimum 8 years of experience supporting IAM, Authentication, or ICAM solutions in government environments
• Strong experience with Microsoft ADFS and enterprise IdP services
• Proficiency with SAML 2.0, OAuth 2.0, OIDC, and JWT technologies
• Experience with PKI, smart card authentication, and MFA

Preferred Qualifications

• Experience with Microsoft Entra ID (Azure AD), PingFederate, Okta, or Keycloak
• Familiarity with PowerShell scripting for ADFS administration
• Knowledge of NIST 800-63 Identity Assurance Levels
• Experience with Docker and Kubernetes

Benefits

• Comprehensive medical, dental, and vision insurance
• 401(k) plan with company match
• Full-flex work weeks and various paid time off plans
• Paid Family Leave program

About the Company

GDIT is a global technology and professional services company delivering solutions to the U.S. government, defense, and intelligence community across 50+ countries.