Cloud PKI & ICAM Systems Engineer | Zero Trust

GovCIO; Alexandria (VA); Hybrid; USD 135,000 - 172,000; Full time

Job summary

GovCIO seeks a SME Systems Engineer for Credential Management (CM) with a focus on Cloud Credential & PKI to support USCG ICAM modernization. You will design, engineer, and deploy identity-centric access controls across legacy and cloud environments in a hybrid Alexandria, VA setting.

Requirements include DoD 8570 IAT II or higher, federated identity knowledge (SAML/OAuth/OIDC, AD/LDAP), CAC/Pki validation experience, and applying NIST SP 800-207 Zero Trust; active Secret clearance preferred.

Qualifications

• DoD 8570 IAT II or higher certification required or equivalent.
• Deep understanding of federated identity concepts (SAML, OAuth, OIDC) and AD/LDAP.
• Experience with CAC authentication and PKI certificate validation.
• Familiarity with Zero Trust guidelines (NIST SP 800-207) in enterprise networks.

Responsibilities

• Lead modernization of legacy access controls into secure ICAM solutions.
• Manage enterprise directories, federation, authentication, and SSO protocols.
• Architect identity lifecycles, provisioning workflows, and privilege controls.
• Design and deploy Zero Trust identity across networks.
• Configure PKI systems, credentials, and authenticators.
• Implement access controls including MFA, SSO, and PAM.
• Build federated identity services for partner interoperability.
• Perform root cause analysis, privilege audits, and tuning.
• Develop interfaces, data flows, and compliance documentation.
• Provide engineering ownership across Cloud Credential & PKI; DigiCert Platform.

Skills

DoD 8570 IAT Level II or higher

Federated identity concepts (SAML, OID

CAC authentication & PKI

NIST SP 800-207 Zero Trust

Education

High School Diploma with 10+ years experience

Tools

DigiCert Platform

PKI & HSMs

SailPoint

Okta

Microsoft Entra ID

Ping Identity

Power BI

Job description

GovCIO seeks a SME Systems Engineer for Credential Management (CM) with a focus on Cloud Credential & PKI to support USCG ICAM modernization. You will design, engineer, and deploy identity-centric access controls across legacy and cloud environments in a hybrid Alexandria, VA setting.

Requirements include DoD 8570 IAT II or higher, federated identity knowledge (SAML/OAuth/OIDC, AD/LDAP), CAC/Pki validation experience, and applying NIST SP 800-207 Zero Trust; active Secret clearance preferred.