The partner company is looking to engineer, implement, and maintain identity, credential, and access management (ICAM) solutions across hybrid cloud and on-premise environments to secure enterprise IT infrastructure and ensure compliance with federal standards.
Requirements
- Minimum 5 years of experience in systems development, identity engineering, or PKI/PKE infrastructure, ideally within a federal or DoD environment.
- Proficiency in designing and implementing enterprise-level directory and identity services.
- In-depth knowledge of DoD ICAM architecture, PKI validation processes, and certificate-based authentication solutions.
- Experience with Microsoft Active Directory, ADLDS, Secure DNS, ActivIdentity ActivClient, Axway Validator Suite, and PowerShell.
- Familiarity with DISA STIG compliance frameworks and Remedy ticketing systems.
- Preferred certifications: Microsoft Identity & Access Administrator (SC-300) or Microsoft Entra ID Governance Specialty.
Responsibilities
- Design, document, and implement enterprise identity, access, and credential management solutions in accordance with DoD ICAM standards.
- Engineer and maintain directory services, including Active Directory Domain Services (ADDS), ADLDS, and Secure DNS, ensuring compliance with baselines and DISA STIGs.
- Support PKI infrastructure, including middleware, certificate validation suites, and CA migration activities.
- Implement and maintain X.509 certificate-based PKE solutions to secure applications across LAN, WLAN, and hybrid cloud environments.
- Collaborate with engineering, cybersecurity, and systems teams to integrate identity services into mission-critical systems.
- Research, develop, and implement scalable system-level software solutions for identity and credential management.
- Maintain comprehensive documentation for technical and non-technical stakeholders.
Other
- Ability to obtain and maintain a Public Trust (Tier 3/NACLC) clearance.
- Strong analytical, communication, and documentation skills.
- Educational requirement: Bachelor’s degree in IT, Cybersecurity, Data Science, IS, or CS (ABET/CAE accredited) OR professional certification (CISSP/SSCP).
