Senior ICAM & Zero Trust Systems Architect (Hybrid)

GDH; Alexandria (VA); Hybrid; USD 83,000 - 90,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

GDH is seeking a Senior Systems Engineer specializing in cross-cutting support and ICAM Enterprise Architecture to advance identity, credential, and access management initiatives. You will design, engineer, and implement secure identity-centric access across diverse enterprise architectures while guiding security posture and compliance with federal standards.

The role provides strategic technical leadership for enterprise identity systems, including SSO, PKI, MFA, and PAM, with a hybrid work

Qualifications

• Active DoD 8570 IAT Level II certification or higher (e.g., Security+ CE, CySA+).
• Federated identity protocols including SAML, OAuth, OIDC, and LDAP/Active Directory.
• Hands-on experience with Smart Card/CAC authentication and PKI certificate validation.
• Proven experience implementing NIST SP 800-207 Zero Trust principles within enterprise networks.
• U.S. citizenship and eligibility for a U.S. Government security clearance.
• Experience with RESTful API authorization protocols, secure gateways, and data schema security standards.

Responsibilities

• Serve as the primary technical authority for enterprise identity management and access control frameworks.
• Lead the modernization of legacy access controls into secure ICAM solutions.
• Manage enterprise directories, federation, authentication, authorization, and single sign-on (SSO) protocols.
• Architect identity lifecycles, user provisioning workflows, and privilege management controls.
• Design and deploy Zero Trust identity principles based on NIST SP 800-207 across network hubs.
• Configure and manage enterprise PKI systems, credentials, and authenticators.
• Implement logical and physical access control systems, including MFA, SSO, and PAM.
• Build federated identity services for secure interoperability with mission partners.
• Conduct root cause analysis, privilege audits, and system performance tuning to optimize security posture.
• Develop technical interfaces, architectures, data flows, and compliance documentation to support ICAM initiatives.
• Own the overarching hybrid identity strategy and ensure interoperability across enterprise identity systems.

Job description

GDH is seeking a Senior Systems Engineer specializing in cross-cutting support and ICAM Enterprise Architecture to advance identity, credential, and access management initiatives. You will design, engineer, and implement secure identity-centric access across diverse enterprise architectures while guiding security posture and compliance with federal standards.

The role provides strategic technical leadership for enterprise identity systems, including SSO, PKI, MFA, and PAM, with a hybrid work