ICAM DevSecOps Engineer – Zero-Trust IDaaS Expert

Tetrad-Digital-Integrity-LL; Arlington (VA); On-site; USD 115,000 - 125,000; Full time

Job summary

Tetrad Digital Integrity (TDI) seeks a Systems Engineer to advance DevSecOps, identity security, and ICAM integration for a DoD mission partner. You will deploy and sustain an IDaaS platform supporting CESO across secure environments.

This on-site role in Arlington, VA requires active TS clearance with SCI eligibility and CI poly, with hands-on work on ForgeRock, SAML/OIDC, and end-to-end IAM workflows within DoD/DISA standards.

Qualifications

• BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree).
• Active TS clearance with SCI eligibility
• Ability to obtain and maintain a CI Poly and Special Program Access.
• IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
• Hands on experience with federation technologies (SAML, OAuth2) and ZeroTrust identity principles.
• Experience engineering or administering the ForgeRock platform (AM, IDM, DS).
• Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
• Experience with Windows and Linux systems administration, shell scripting, and troubleshooting.

Responsibilities

• Engineer, deploy, integrate, secure, and maintain ForgeRock IdP/ICAM components within complex, mission-critical environments.
• Apply DevSecOps practices—including CI/CD pipelines, automated provisioning, configuration-as-code, and repeatable deployment patterns to ICAM services.
• Integrate ICAM services with enterprise directory architecture, federation services, Zero Trust controls, and cross-domain workflows.
• Implement and maintain access management functions including SSO, identity federation (SAML, OAuth2, OIDC), authentication flows, and policy enforcement.
• Collaborate with cybersecurity, development, and infrastructure teams to design secure identity solutions aligned with DoD and DISA standards.
• Conduct system hardening, monitoring, log analysis, and performance tuning across Linux-based ICAM components.
• Perform systems integration tasks such as API-based connectors, service integrations, and automated provisioning/deprovisioning workflows.
• Support architectural reviews, internal control assessments, and risk management activities related to ICAM operations.
• Diagnose and resolve escalated ForgeRock/ICAM issues within defined SLAs, including root-cause analysis and corrective action development.
• Create, maintain, and version-control engineering documentation including CONOPS, SOPs, API interface documentation, and workflow diagrams.
• Provide input to audits, ATO support, compliance adherence, and continuous improvement initiatives.
• Develop and maintain ICAM performance metrics, identity lifecycle reports, and engineering dashboards.
• Partner with development teams to automate user, group, and credential workflows across secure enclaves.

Skills

DevSecOps

ICAM security

Zero Trust

SAML/OAuth2/OIDC

CI/CD pipelines

Education

Bachelor's degree in Computer Science or related discipline

Tools

ForgeRock platform

Ansible

GitLab

Jenkins

Job description

Tetrad Digital Integrity (TDI) seeks a Systems Engineer to advance DevSecOps, identity security, and ICAM integration for a DoD mission partner. You will deploy and sustain an IDaaS platform supporting CESO across secure environments.

This on-site role in Arlington, VA requires active TS clearance with SCI eligibility and CI poly, with hands-on work on ForgeRock, SAML/OIDC, and end-to-end IAM workflows within DoD/DISA standards.