ICAM Identity Provider (IdP) Engineer

Responsibilities

• Design, develop, configure, and maintain enterprise Identity Provider (IdP) services supporting over 4 million identities
• Engineer and sustain Microsoft Active Directory Federation Services (ADFS) infrastructure
• Configure federation trust relationships with internal and external IdPs and Service Providers
• Implement authentication solutions using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation
• Develop authentication policies, claims rules, and authorization workflows
• Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access
• Collaborate with cybersecurity and cloud teams to implement Zero Trust Architecture
• Monitor and resolve complex authentication, token, and identity assertion issues
• Create technical documentation including architecture diagrams and SOPs

Requirements

• Active Secret Clearance (Interim not allowed)
• Bachelor's Degree in a related technical discipline or equivalent experience
• DoD 8570/8140 IAT Level II certification (Security+ CE or higher)
• Minimum 8 years of experience supporting IAM, Authentication, or ICAM solutions in government environments
• Strong experience with Microsoft ADFS and enterprise IdP services
• Proficiency with SAML 2.0, OAuth 2.0, OIDC, and JWT technologies
• Experience with PKI, smart card authentication, and MFA

Preferred Qualifications

• Experience with Microsoft Entra ID (Azure AD), PingFederate, Okta, or Keycloak
• Familiarity with PowerShell scripting for ADFS administration
• Knowledge of NIST 800-63 Identity Assurance Levels
• Experience with Docker and Kubernetes

Benefits

• Comprehensive medical, dental, and vision insurance
• 401(k) plan with company match
• Full-flex work weeks and various paid time off plans
• Paid Family Leave program

About the Company

GDIT is a global technology and professional services company delivering solutions to the U.S. government, defense, and intelligence community across 50+ countries.