Senior DevSecOps ICAM Engineer - IDaaS & Zero Trust

Tetrad Digital Integrity LLC; Arlington (VA); On-site; USD 115,000 - 125,000; Full time

Job summary

Tetrad Digital Integrity LLC is seeking a Systems Engineer to support the DISA CESO with Identity-as-a-Service and Zero-Trust initiatives. You will deploy and secure ForgeRock ICAM components, automate provisioning, and integrate with enterprise directories in secure environments at Arlington, VA, onsite five days a week.

The role requires TS clearance, DoD-aligned ICAM experience, and strong DevSecOps practices across Linux/Windows, SSO and federation technologies.

Qualifications

• BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree).
• Active TS clearance with SCI eligibility.
• Ability to obtain and maintain a CI Poly and Special Program Access.
• IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).
• Hands on experience with federation technologies (SAML, OAuth2) and ZeroTrust identity principles.
• Experience engineering or administering the ForgeRock platform (AM, IDM, DS).
• Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
• Experience with Windows and Linux systems administration, shell scripting, and troubleshooting.

Responsibilities

• Engineer, deploy, integrate, secure, and maintain ForgeRock IdP/ICAM components within complex, mission-critical environments.
• Apply DevSecOps practices—including CI/CD pipelines, automated provisioning, configuration-as-code, and repeatable deployment patterns to ICAM services.
• Integrate ICAM services with enterprise directory architecture, federation services, Zero Trust controls, and cross-domain workflows.
• Implement and maintain access management functions including SSO, identity federation (SAML, OAuth2, OIDC), authentication flows, and policy enforcement.
• Collaborate with cybersecurity, development, and infrastructure teams to design secure identity solutions aligned with DoD and DISA standards.
• Conduct system hardening, monitoring, log analysis, and performance tuning across Linux-based ICAM components.
• Perform systems integration tasks such as API-based connectors, service integrations, and automated provisioning/deprovisioning workflows.
• Support architectural reviews, internal control assessments, and risk management activities related to ICAM operations.
• Diagnose and resolve escalated ForgeRock/ICAM issues within defined SLAs, including root-cause analysis and corrective action development.
• Create, maintain, and version-control engineering documentation including CONOPS, SOPs, API interface documentation, and workflow diagrams.
• Provide input to audits, ATO support, compliance adherence, and continuous improvement initiatives.
• Develop and maintain ICAM performance metrics, identity lifecycle reports, and engineering dashboards.
• Partner with development teams to automate user, group, and credential workflows across secure enclaves.

Skills

DevSecOps

Zero Trust

ICAM concepts

Linux administration

Windows administration

Shell scripting

SAML/OAuth2/OIDC

Education

Bachelor's degree in Computer Science/IT or related

8+ years systems engineering experience

Tools

ForgeRock AM/IDM/DS

Jenkins/GitLab CI/CD

Ansible

AWS IAM

Job description

Tetrad Digital Integrity LLC is seeking a Systems Engineer to support the DISA CESO with Identity-as-a-Service and Zero-Trust initiatives. You will deploy and secure ForgeRock ICAM components, automate provisioning, and integrate with enterprise directories in secure environments at Arlington, VA, onsite five days a week.

The role requires TS clearance, DoD-aligned ICAM experience, and strong DevSecOps practices across Linux/Windows, SSO and federation technologies.