DDSB Incumbent | Senior Identity Engineering Services (Systems Developer)

VetRamp; San Antonio (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

VetRamp is seeking a Senior Identity Engineer to architect and sustain identity, credential, and access management solutions across the Defense Health Agency network. The role focuses on AD/ADLDS, PKI, PAM, and certificate management to meet DoD directives and DISA STIGs.

You will design and maintain identity services across on-prem and cloud environments, ensure DoD alignment, and deliver automated policies and reporting to support secure MHS operations.

Qualifications

• Experience designing and implementing identity, access, and credential management solutions (ICAM).
• Strong familiarity with DoD ICAM standards and DoDI directives.
• Proven PKI, PAM, and certificate management skills in complex environments.

Responsibilities

• Design, document, and implement compliant identity, access, and credential management solutions (PKI, PAM, key management).
• Engineer and maintain ADDS, ADLDS, and DNS architectures aligned with DHA baselines and STIGs.
• Update the mJAD Architecture & Design Document and related engineering packages.
• Support DHA PKI infrastructure aligned with DoDI 8520.02, including CA migration and Validator Suites.
• Maintain PKI Certificate Validation Suites and support certificate issuance across LAN/WLAN and Med-COI systems.
• Engineer identity management solutions across hybrid on-prem and cloud environments with policy-based access control.
• Develop identity and authentication architectures per DoD ICAM Reference Design and DoDI 8520.03.
• Deliver identity automation, alerting, reporting, and enforcement policies for MHS requirements.
• Engineer PKE solutions enabling X.509 usage across MHS apps with PKI integration.
• Provide engineering support for certificate-enabled apps like ActivClient and Axway Desktop Validator.
• Research, design, and test system-level and embedded software, including network distribution platforms.

Skills

Identity management

Security architecture

DoD ICAM standards

PKI integration

Education

Bachelor’s degree in information technology or cybersecurity

Baseline: FITSP-D or GCSA or GISF or SSCP or GLSC or CISSP

Tools

Active Directory / ADDS

ADLDS

DNS

DoD PKI / IMA

ActivIdentity ActivClient

Axway Validator Suites

DoD ICAM Reference Architecture

PowerShell

LDAP

X.509 utilities

Remedy

Microsoft Server OS

DoD STIGs / DoDI 8520.02/03

Job description

Senior Identity Engineer | Systems Developer

Location

San Antonio, TX

Clearance Required

Public Trust (ADP/IT-II); Tier 3 Investigation (NACLC)

Program Overview

The Defense Health Agency’s Domain and Directory Services Branch (DDSB) delivers identity, credential, and access management (ICAM) services across the Military Health System (MHS), supporting secure, scalable, and interoperable access for over 200,000 users across 250 global sites. This role is central to engineering and sustaining identity infrastructure, directory services, PKI systems, and credentialing solutions aligned with DoD ICAM standards and cybersecurity frameworks.

Summary

The IdM Engineer Systems Developer is a senior-level technical professional responsible for the design, development, and support of identity and access management solutions across the DHA enterprise. This role includes engineering support for Active Directory, Public Key Infrastructure (PKI), Privileged Access Management (PAM), Cryptographic Key Management, and other security-focused identity services. The engineer ensures systems comply with DoD directives, DISA STIGs, and DHA architectural standards.

Key Responsibilities

• Design, document, and implement standardized, compliant, and forward-looking solutions for identity, access, and credential management, including PKI, PAM, and cryptographic key management.
• Engineer and maintain directory services architectures including Active Directory Domain Services (ADDS), Active Directory Lightweight Directory Services (ADLDS), and Secure DNS integrated with the latest DHA server baselines and DISA STIGs.
• Update and sustain the mJAD Architecture & Design Document and related engineering packages.
• Engineer and support the DHA PKI infrastructure in alignment with DoDI 8520.02, including CA migration, Middleware (e.g., ActivIdentity), and Validator Suites (e.g., Axway).
• Maintain PKI Certificate Validation Suites and support certificate issuance across LAN/WLAN and Med-COI systems.
• Engineer identity management solutions to manage users, groups, and assets across hybrid on-prem and cloud environments, enforcing policy-based access to systems, SaaS, and resource partners.
• Develop identity and authentication architectures compliant with DoD Enterprise ICAM Reference Design and DoDI 8520.03.
• Deliver identity automation, alerting, reporting, and enforcement policies to meet MHS operational and security requirements.
• Engineer PKE solutions enabling X.509 certificate usage across MHS applications, ensuring integration with PKI for authentication, confidentiality, data integrity, and non-repudiation.
• Provide engineering support for certificate-enabled applications such as ActivClient and Axway Desktop Validator.
• Research, design, and test system-level and embedded software solutions, including network distribution platforms and compilers.
• Apply computer science, engineering, and mathematical analysis to develop scalable, secure software architectures for MHS systems.

Preferred Tools & Technologies

• Microsoft Active Directory, ADLDS, DNS
• DoD PKI / Internal Medium Assurance (IMA)
• ActivIdentity ActivClient, Axway Validator Suites
• DoD ICAM Reference Architecture
• PowerShell, LDAP, X.509 certificate utilities
• Remedy Ticketing System
• Microsoft Server Operating Systems
• DoD STIGs, DoDI 8520.02 / 03

Education & Certification Requirements (per DoD 8140 Qualification Matrices)

1. Microsoft Certified: Cyber Security Architect Expert or Azure Solutions Architect Expert
2. Any of the following…

• Academic Education: Bachelor’s degree in information technology, Cybersecurity, or a related discipline.
• OR Baseline: FITSP-D or GCSA or GISF or SSCP or GLSC or CISSP