Zero-Trust ICAM Systems Engineer (DevSecOps)

Tetrad Digital Integrity LLC; Arlington (TX); On-site; USD 115,000 - 125,000; Full time

Job summary

Tetrad Digital Integrity in Arlington, VA seeks a Systems Engineer with DevSecOps, identity security, and ICAM expertise to support the DISA CESO’s IDaaS platform within a Zero‑Trust architecture.

This onsite role requires an active TS clearance, involves deploying ForgeRock IdP/ICAM, Ping Identity components, SSO, SAML, OAuth2, and OIDC across secure environments, and collaborating with cybersecurity, development, and infrastructure teams.

Qualifications

• BS in Computer Science, IT, or related field with 8+ years of systems engineering.
• Active TS clearance with SCI eligibility and CI Poly ability.
• IAT Level II certification or higher (Security+ CE, CySA+, SSCP, CISSP).
• Experience with ForgeRock ICAM platform (AM/IDM/DS) and Ping Identity.
• Strong knowledge of SAML, OAuth2, and OIDC; Windows and Linux administration.

Responsibilities

• Engineer, deploy, and maintain ForgeRock IdP/ICAM components in complex environments.
• Apply DevSecOps practices: CI/CD pipelines, automated provisioning, and config-as-code.
• Integrate ICAM with directory services, federation, and Zero Trust controls.
• Implement access management: SSO, federation, authentication flows, and policy enforcement.
• Collaborate with cybersecurity, development, and infrastructure teams to align with DoD/DISA standards.
• Perform system hardening, monitoring, and log analysis across ICAM components.
• Support architectural reviews, risk assessments, and audit preparations.
• Create and maintain CONOPS, SOPs, API docs, and workflow diagrams.

Skills

DevSecOps

ICAM concepts

Zero Trust identity

Identity security

Cross-domain workflows

Education

BS in Computer Science or related discipline

Tools

ForgeRock IDM/AM/DS

Ping Identity

SAML

OAuth2

OIDC

CI/CD pipelines (GitLab, Jenkins)

Windows/Linux administration

Ansible

Job description

Tetrad Digital Integrity in Arlington, VA seeks a Systems Engineer with DevSecOps, identity security, and ICAM expertise to support the DISA CESO’s IDaaS platform within a Zero‑Trust architecture.

This onsite role requires an active TS clearance, involves deploying ForgeRock IdP/ICAM, Ping Identity components, SSO, SAML, OAuth2, and OIDC across secure environments, and collaborating with cybersecurity, development, and infrastructure teams.