Senior ICAM Systems Engineer - DevSecOps & Zero Trust

TDI (Tetrad Digital Integrity); Arlington (VA); On-site; USD 115,000 - 125,000; Full time

Job summary

Tetrad Digital Integrity (TDI) seeks a Systems Engineer to advance an IDaaS platform underpinning CESO's Zero‑Trust architecture. You will work hands-on with ForgeRock ICAM components, Ping Identity tools, and enterprise directories in secure environments.

The role emphasizes DevSecOps, automated provisioning, and cross‑domain integration, with a focus on DoD/DISA standards. Requires active TS clearance and willingness to be onsite in Arlington, VA.

Qualifications

• BS in Computer Science, IT, or related discipline; 8+ years of systems engineering experience (or equivalent)
• Active TS clearance with SCI eligibility; CI Poly and Special Program Access possible
• IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP)
• Hands-on experience with federation technologies (SAML, OAuth2) and Zero Trust identity principles
• Experience engineering/administering the ForgeRock platform (AM, IDM, DS)
• Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls
• Experience with Windows and Linux systems administration, shell scripting, and troubleshooting

Responsibilities

• Engineer, deploy, integrate, secure, and maintain ForgeRock IdP/ICAM components
• Apply DevSecOps practices—CI/CD pipelines, automated provisioning, configuration-as-code
• Integrate ICAM services with directory architecture, federation services, and Zero Trust controls
• Implement and maintain access management functions including SSO, federation (SAML, OAuth2, OIDC)
• Collaborate to design secure identity solutions aligned with DoD and DISA standards
• Conduct system hardening, monitoring, log analysis, and performance tuning
• Perform system integration tasks such as API connectors and automated provisioning/deprovisioning
• Support architectural reviews, internal control assessments, and risk management
• Diagnose and resolve ForgeRock/ICAM issues within SLAs; perform root-cause analysis
• Create and version-control CONOPS, SOPs, API docs, workflow diagrams
• Provide input to audits, ATO support, compliance adherence, continuous improvement
• Develop ICAM performance metrics, identity lifecycle reports, and dashboards
• Partner with development teams to automate user/group/credential workflows

Skills

DevSecOps practices

Zero Trust

ICAM concepts

Identity lifecycle management

SAML

OAuth2

SSO

Policy enforcement

Systems integration

Shell scripting

Linux administration

Windows administration

Troubleshooting

Education

Bachelor’s degree in Computer Science / IT or related discipline

Tools

ForgeRock (AM/IDM/DS)

Ping Identity

Ansible

CI/CD tools (GitLab, Jenkins)

Enterprise directory services

Job description

Tetrad Digital Integrity (TDI) seeks a Systems Engineer to advance an IDaaS platform underpinning CESO's Zero‑Trust architecture. You will work hands-on with ForgeRock ICAM components, Ping Identity tools, and enterprise directories in secure environments.

The role emphasizes DevSecOps, automated provisioning, and cross‑domain integration, with a focus on DoD/DISA standards. Requires active TS clearance and willingness to be onsite in Arlington, VA.