Systems Developer Advanced - ID Engineering S

The Identity Engineer provides technical expertise to design, implement, and sustain enterprise identity and access management (IdAM) solutions in support of the DHA Domain and Directory Services Branch (DDSB). This role ensures secure, reliable, and scalable identity services that enable compliance with DoD ICAM Strategy, Zero Trust principles, and enterprise interoperability requirements. The Identity Engineer strengthens DHA’s enterprise cybersecurity posture and interoperability by providing secure, modern identity services. By enabling reliable authentication, access control, and integration with enterprise and cloud environments, this role supports the DHA’s mission to deliver secure, trusted healthcare IT services across the Military Health System., * Engineer, deploy, and sustain identity management services, including Active Directory Domain Services (AD DS), Entra ID (Azure AD), Active Directory Federation Services (AD FS), and Microsoft Identity Manager.

• Support federation, authentication, and authorization protocols (e.g., SAML, OAuth, Kerberos, OpenID Connect) across DHA enterprise environments.
• Implement and maintain Public Key Infrastructure (PKI) and Public Key Enablement (PKE) capabilities, ensuring compliance with DoDI 8520.02 and enterprise security policies.
• Integrate identity services with enterprise IT platforms, including MED365, mJAD, MECM, Intune, and SaaS offerings, to enforce Zero Trust policies and access governance.
• Conduct identity lifecycle management, including provisioning, de-provisioning, and attribute synchronization for users and non-person entities.
• Support identity auditing, monitoring, and reporting to detect anomalies, enforce least-privilege access, and ensure compliance with DHA and DoD policies.
• Collaborate with IA, endpoint, and enterprise management teams to integrate identity solutions with security monitoring, automation, and risk assessment frameworks.
• Develops:
• Identity system design and architecture documents
• Federation and authentication integration packages
• PKI/PKE sustainment and compliance reports
• Identity lifecycle management documentation

Education: BS in Computer Science related field or A BBA in the same technical field provided it is not pursued as a minor or Military Experience or CISSP

Certifications: Microsoft Certified: Cyber Security Architect Expert or Microsoft Certified: Azure Solutions Architect Expert