Senior DevSecOps ICAM Engineer with TS Clearance

Tetrad Digital Integrity; Arlington (VA); On-site; USD 115,000 - 125,000; Full time

Job summary

Tetrad Digital Integrity is seeking a Systems Engineer in Arlington, VA to support DISA CESO with an IDaaS platform, focusing on ForgeRock ICAM and Zero-Trust architectures. The role emphasizes deployment, automation, and cross-domain integration in secure environments.

The candidate will manage CI/CD pipelines, identity federation, and access controls across Windows and Linux systems, ensuring robust security postures and DoD-aligned practices. Requires active TS clearance and CI Poly.

Qualifications

• BS in Computer Science or related discipline; 8+ years systems engineering.
• Active TS clearance with SCI eligibility and CI Poly.
• IAT Level II certification or higher (Security CE, CySA, SSCP, CISSP).
• Experience with ForgeRock ICAM stack (AM/IDM/DS) and ICAM concepts.
• Experience with Windows and Linux systems administration, scripting.

Responsibilities

• Engineer, deploy, secure, and maintain ForgeRock ICAM components within complex, mission-critical environments.
• Apply DevSecOps practices to ICAM services, including CI/CD pipelines and automated provisioning.
• Integrate ICAM with enterprise directory architecture, federation services, Zero Trust controls, and cross-domain workflows.
• Implement and maintain access management functions including SSO, federation (SAML, OAuth2, OIDC), authentication and policy enforcement.
• Collaborate with cybersecurity, development, and infrastructure teams to design secure identity solutions.
• Conduct system hardening, monitoring, log analysis, and performance tuning across Linux-based ICAM components.
• Perform systems integration tasks such as API connectors and automated provisioning/deprovisioning workflows.
• Support architectural reviews, internal controls assessments, and risk management activities for ICAM operations.
• Diagnose and resolve ForgeRock/ICAM issues within SLAs, with root-cause analysis.
• Create and maintain engineering documentation including CONOPS, SOPs, API docs, and workflow diagrams.
• Provide input to audits, ATO support, compliance adherence, and continuous improvement initiatives.

Skills

DevSecOps

ICAM concepts

Identity lifecycle

Scripting

Windows & Linux

Education

BS in Computer Science or related

Tools

ForgeRock IAM

SAML/OIDC/OAuth2

Ansible

GitLab/Jenkins

Job description

Tetrad Digital Integrity is seeking a Systems Engineer in Arlington, VA to support DISA CESO with an IDaaS platform, focusing on ForgeRock ICAM and Zero-Trust architectures. The role emphasizes deployment, automation, and cross-domain integration in secure environments.

The candidate will manage CI/CD pipelines, identity federation, and access controls across Windows and Linux systems, ensuring robust security postures and DoD-aligned practices. Requires active TS clearance and CI Poly.