Principal Identity Access and Zero Trust Architect - TS/SCI with Polygraph

General Dynamics Information Technology, Inc.; Chantilly (VA); On-site; USD 162,000 - 219,000; Full time

Benefits offered by this job

401K with company match

Paid time off

Health, dental, vision benefits

Job summary

General Dynamics Information Technology, Inc. in Chantilly, VA is seeking an Enterprise Identity and Access Architect to lead identity, authentication, authorization, privileged access, and Zero Trust architectures across a major Department of War program.

This role balances robust security with a seamless user experience; it requires extensive AD/Entra ID expertise, RMF/ATO experience, and the ability to mentor engineers, brief Government stakeholders, and align identity decisions with

Qualifications

• Bachelor's degree required in a related field or approved equivalent experience.
• 10+ years of related experience in identity, security, directory, or enterprise infrastructure.
• 5+ years in identity/access architecture.

Responsibilities

• Define enterprise identity principles and target architectures across AD, Entra ID, PKI, federation, MFA, CA, RBAC, PIM/PAM, and service identities.
• Lead authentication-flow analysis and design for single‑session mission applications including token behavior and reauthentication.
• Design integration between Cisco ISE and Microsoft identity posture, including trust, claims, and policy decision points.
• Develop identity lifecycle controls for onboarding, transfers, terminations, recertification, entitlements, privileged roles, and automation identities.
• Review designs for authentication, authorization, secrets, token handling, least privilege, and auditability.
• Define identity-related logging, monitoring, anomaly detection, and incident-response requirements.

Skills

Active Directory (AD)

Identity Access Management (IAM)

Zero Trust

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or related field

Job description

Requisition Details

Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret SCI + Polygraph Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: IT Infrastructure and Operations

Job Qualifications

Skills: Active Directory (AD), Identity Access Management (IAM), Zero Trust Certifications: None Experience: 10 + years of related experience US Citizenship Required: Yes

Job Description

GDIT is seeking an Enterprise Identity and Access Architect to lead the design and ownership of identity, authentication, authorization, privileged access, and Zero Trust access architectures across a major Department of War Program. This role is responsible for balancing robust security with a seamless user experience; ensuring identity controls reduce risk without introducing repetitive authentication, session disruptions, or operational workarounds.

Key Responsibilities

• Define enterprise identity principles, target architecture, patterns, decision records, and exception criteria across Active Directory, Entra ID, PKI, federation, MFA, Conditional Access, RBAC, PIM/PAM, and service identities.
• Lead authentication‑flow analysis and design for single‑session mission applications, including token/session behavior, step‑up authentication, timeout, reauthentication, and fallback.
• Design integration between Cisco ISE network access policy and Microsoft identity/device-compliance posture, including trust, claims, attributes, policy decision points, and failure behavior.
• Develop identity lifecycle controls for onboarding, transfer, termination, recertification, entitlements, privileged roles, service accounts, certificates, and automation identities.
• Review application and platform designs for authentication, authorization, secrets, token handling, least privilege, separation of duties, session security, and auditability.
• Define identity‑related logging, monitoring, anomaly detection, evidence, and incident‑response requirements with Security, Observability, and Service Operations.
• Partner with cloud, EUC, network, application, and ServiceNow architects to ensure identity decisions are integrated rather than locally optimized.
• Support RMF/ATO/cATO artifacts, Zero Trust maturity evidence, control implementation, and inspection readiness for identity capabilities.
• Lead identity architecture reviews, resolve cross‑team policy conflicts, mentor engineers, and brief Government stakeholders on risk/user‑experience trade‑offs.

Required Qualifications

Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or related field, or approved equivalent experience.

Location: Onsite Clearance: Active TS/SCI with Polygraph

10+ years of identity, security, directory, or enterprise infrastructure experience, including 5+ years in identity/access architecture.

Deep hands‑on knowledge of Active Directory and Microsoft Entra ID, including federation/synchronization, Conditional Access, RBAC, PIM, MFA, device identity, and hybrid identity.

Strong understanding of Zero Trust, identity‑centric access, least privilege, continuous evaluation, device posture, and policy enforcement.

Experience designing authentication and authorization for enterprise and mission applications using SAML, OAuth 2.0, OpenID Connect, Kerberos, certificates, or comparable mechanisms.

Experience with privileged‑access management, identity governance/recertification, service accounts, secrets, PKI, and non-person entities.

Experience with Cisco ISE or a comparable NAC platform and integration between network access and enterprise identity/device posture.

Working knowledge of RMF, NIST controls, STIGs, audit logging, incident response, classified data boundaries, and ATO impacts.

Demonstrated technical leadership, structured decision‑making, conflict resolution, mentoring, and ability to explain identity trade‑offs to non-specialists.

Preferred Qualifications

• Microsoft Certified: Identity and Access Administrator Associate, Cybersecurity Architect Expert, CISSP and role‑relevant ISSAP, ISSEP or CCSP.
• Experience with M365 GCC/GCC High, Azure Government, AVD, Intune, Defender, and mission‑app integration in DoW/IC environments.
• Experience implementing single sign‑on or session consolidation for high‑security applications with measurable reduction in user friction.
• Experience integrating identity telemetry with Sentinel, Splunk/Elastic, Dynatrace, ServiceNow, or security analytics.
• Prior IC experience and familiarity with cross‑domain or multi‑enclave identity constraints.

About GDIT

GDIT IS YOUR PLACE At GDIT, the mission is our purpose, and our people are at the center of everything we do.

Growth: AI-powered career tool that identifies career steps and learning opportunities Support: An internal mobility team focused on helping you achieve your career goals Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off Community: Award‑winning culture of innovation and a military‑friendly workplace OWN YOUR OPPORTUNITY Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.

#GDITcareers #OpportunityOwned #WeAreGDIT #transitioningmilitary #clearedjobs #veterans #Autobots #IntelligenceEngineered

Salary

The likely salary range for this position is $161,500 - $218,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Working Conditions

Scheduled Weekly Hours: 40 Travel Required: None Telecommuting Options: Onsite Work Location: USA VA Chantilly Additional Work Locations:

Total Rewards

• Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post‑tax dollars up to the IRS annual limits and receive a company match.
• To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• To ensure our employees are able to protect their income, other offerings such as short and long‑term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.
• We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Identity Verification Process

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission‑ready capabilities in AI, cloud, cyber and software development.

Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Opportunity Owned From working with technologies like AI, cyber and cloud to careers in intelligence and health, we offer endless opportunities to apply your expertise to create a safer, smarter world.

For more information about GDIT's Privacy Policy, click here: Privacy Policy | GDIT