Senior Identity & Access Engineer — Systems Developer

VetRamp; San Antonio (TX); On-site; USD 120,000 - 165,000; Full time

Job summary

VetRamp is seeking an experienced Senior Identity Engineer | Systems Developer to lead design, development, and support of ICAM solutions across enterprise environments. You will work with ADDS, PKI, PAM, and PKI migrations while aligning with DoD directives and DHA architecture.

The role spans on‑prem and cloud integrations, ensuring secure, compliant identity services. Candidates should bring hands‑on expertise with Active Directory, PKI, and X.509, plus PowerShell and LDAP tooling.

Qualifications

• Bachelor’s degree in information technology, cybersecurity, or related discipline.
• Certifications such as CISSP, GIAC or FITSP-D are preferred.
• Experience with DoD ICAM standards and PKE PKI architectures.

Responsibilities

• Design and implement compliant identity, access, and credential management solutions (PKI, PAM, key management).
• Maintain and evolve Active Directory and directory services architectures (ADDS, ADLDS).
• Support DoD PKI infrastructure, CA migration, and validation suites.
• Develop identity management across hybrid on‑prem and cloud environments with policy-based access.
• Ensure systems comply with DoD directives, DISA STIGs, and DHA standards.

Skills

Active Directory

PKI

PowerShell

LDAP

X.509 certificates

DoD STIGs

Education

Bachelor’s degree in IT, Cybersecurity or related

FITSP-D or CISSP or GIISF

Tools

ActivIdentity ActivClient

Axway Validator Suites

Remedy

AD DS

ADLDS

Job description

VetRamp is seeking an experienced Senior Identity Engineer | Systems Developer to lead design, development, and support of ICAM solutions across enterprise environments. You will work with ADDS, PKI, PAM, and PKI migrations while aligning with DoD directives and DHA architecture.

The role spans on‑prem and cloud integrations, ensuring secure, compliant identity services. Candidates should bring hands‑on expertise with Active Directory, PKI, and X.509, plus PowerShell and LDAP tooling.