Zero Trust ICAM & PKI Architect — Enterprise Security

General Dynamics - IT; Tampa (FL); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

401K with company match

Comprehensive benefits

Paid time off

Job summary

General Dynamics - IT seeks a Zero Trust ICAM & PKI SME to lead identity management, PKI, and access governance across USCENTCOM networks. The role drives security architecture, integration with HR data sources, and certificate lifecycle management for mission-critical systems.

Responsibilities include deploying PAM/IGA solutions, enforcing modern authentication protocols, and coordinating across cyber teams while meeting DoW/ DISA requirements. Travel is possible as needed.

Qualifications

• Clearance: Active Secret
• Citizenship: U.S. Citizenship required
• Education: Bachelor's Degree in Cybersecurity or Information Assurance or six years of related experience
• Certification: DoW 8140/IAT Level II/III or IAM Level II/III plus role-based credentials (e.g., CISSP)
• Experience: 10+ years of enterprise IT/cybersecurity engineering and operations

Responsibilities

• Design, implement, and operate enterprise ICAM solutions including identity lifecycle and directory services.
• Configure and manage PKI architectures (CAs, RAs, OCSP, HSMs) and CLM processes.
• Lead PAM, IGA, SSO, and federation efforts to enforce Zero Trust and mutual TLS.

Skills

Identity Management

Credentialing & PKI

Access Management

Education

Bachelor's Degree in Cybersecurity or Information Assurance

Tools

Delinea PAM

SailPoint

Keyfactor

Microsoft AD CS

Job description

General Dynamics - IT seeks a Zero Trust ICAM & PKI SME to lead identity management, PKI, and access governance across USCENTCOM networks. The role drives security architecture, integration with HR data sources, and certificate lifecycle management for mission-critical systems.

Responsibilities include deploying PAM/IGA solutions, enforcing modern authentication protocols, and coordinating across cyber teams while meeting DoW/ DISA requirements. Travel is possible as needed.