DevSecOps ICAM Engineer — ForgeRock & Zero Trust

GCyber

Arlington (VA)

On-site

USD 140,000 - 190,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Paid leave

Parental leave

Health insurance

401(k) matching

Commuter benefits

Parking allowance

Development plans

Job summary

GCyber is seeking a Systems Engineer (DevSecOps and ICAM) to support our government customer by engineering, deploying, automating, and sustaining an IDaaS platform that underpins zero-trust architecture.

The role involves hands-on work with ForgeRock components, SSO/SAML/OIDC, CI/CD pipelines, and ICAM integration patterns, aligned with DoD, RMF, and enterprise security standards to support ATOs and audits.

Qualifications

Active DoD Top Secret clearance with SCI eligibility.
CI Poly and Special Program Access required.
BS in Computer Science, IT, or related field with 8+ years of systems engineering experience.
IAT II Certification (e.g., Security+, CySA+, GICSP, GSEC, SSCP).
Hands-on experience with federation technologies (SAML, OAuth, OpenID Connect) and Zero-Trust identity principles.
Experience with ForgeRock platform (AM, IDM, DS).
Strong ICAM concepts and identity lifecycle management knowledge.
Experience with Windows and Linux system administration, scripting, and troubleshooting.
Ability to collaborate across technical and non-technical teams in a fast-paced environment.

Responsibilities

Engineer, deploy, integrate, secure, and maintain ForgeRock ICAM solutions using DevSecOps practices.
Design and implement enterprise identity services including SSO, SAML, OAuth2, OIDC, and identity federation.
Collaborate with cybersecurity, development, and infrastructure teams to align with DoD RMF and enterprise security standards.
Perform system hardening, monitoring, tuning, troubleshooting, and root-cause analysis for ForgeRock components.
Develop documentation, diagrams, SOPs, CONOPS, dashboards, and operational metrics for ICAM operations.