> Markdown version of [/jobs/ext/1404890-principal-identity-solutions-engineer-ts-sci-polygraph](https://www.wearedevelopers.com/jobs/ext/1404890-principal-identity-solutions-engineer-ts-sci-polygraph). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Identity Solutions Engineer TS/SCI Polygraph - **Company:** Leidos, Inc. - **Location:** Hanover, NH, United States - **Salary:** $131,300.0 - $237,350.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Systems Engineering, Confluence, Authentication Protocols, Computer Engineering, Linux, Identity and Access Management, OAuth, OpenID, Public Key Infrastructure, Systems Development Life Cycle, Openid Connect, Security Assertion Markup Language (SAML), Single Sign-On, Software Engineering, Cloud Platform System, Information Technology - **Published:** July 23, 2026 - **Apply:** https://www.dice.com/job-detail/061caaac-9f6a-4d6a-b35c-cb27ca6920a4 ## About the Role * Active TS/SCI clearance with polygraph. * Bachelor's Degree or higher in computer engineering or in a field related to computer engineering or computer science disciplines. * Minimum 15 years of Systems Engineering or related technical experience supporting enterprise IT environments. ## Description Job Summary: The Secure Token Service (STS) Team Lead is responsible for leading the design, implementation, and sustainment of enterprise Identity, Credential, and Access Management (ICAM) solutions focused on Secure Token Services (STS) and Single Sign-On (SSO) capabilities. This role leads a multidisciplinary team of developers, system integrators, and system administrators to architect, deploy, and maintain commercial off-the-shelf (COTS) identity management solutions across enterprise environments. The ideal candidate possesses deep technical expertise in federation technologies, PKI, authentication protocols, cloud environments, and enterprise security architectures while serving as the technical lead for planning, implementation, and customer engagement. Desired Skills * Lead the architecture, implementation, and sustainment of enterprise Secure Token Service (STS) and Single Sign-On (SSO) solutions. * Manage and mentor a team of developers, system integrators, and system administrators, including onboarding, training, and technical oversight. * Gather customer requirements, develop implementation strategies, and estimate work efforts for new capabilities and enhancements. * Install, configure, integrate, and maintain COTS identity management platforms across Linux, Windows, and cloud environments. * Design and support federation solutions utilizing SAML, OAuth, OpenID Connect (OIDC), PKI/TLS, and modern authentication technologies. * Develop automation solutions and integrate modern and legacy technologies to improve operational efficiency while maintaining technical documentation in Confluence. * Troubleshoot complex authentication, networking, and identity management issues while ensuring adherence to software development lifecycle (SDLC) and change management processes. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What is Software Engineering?](https://www.wearedevelopers.com/magazine/289-what-is-software-engineering) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)