> Markdown version of [/jobs/ext/2649528-icam-identity-provider-idp-engineer-enterprise](https://www.wearedevelopers.com/jobs/ext/2649528-icam-identity-provider-idp-engineer-enterprise). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ICAM Identity Provider (IdP) Engineer - Enterprise... - **Company:** General Dynamics Information Technology - **Location:** Falls Church, VA, United States (Remote available) - **Salary:** $255,000.0 - $345,000.0 - **Contract:** Contract - **Skills:** Microsoft Windows, Active Directory, Active Directory Federation Services, Application Programming Interfaces (APIs), Agile Methodology, User Authentication, Microsoft Azure, Microsoft Online Services, CompTIA Security+, Cyber Security, Disaster Recovery, Fault Tolerance, Monitoring of Systems, Lightweight Directory Access Protocols (LDAP), Linux Servers, OAuth, OpenID, Performance Tuning, Public Key Infrastructure, Windows PowerShell, Openid Connect, Azure Active Directory, Phishing, Zero Trust Network Access, JSON Web Token, Security Assertion Markup Language (SAML), Single Sign-On, Smart Cards, Systems Integration, Web Applications, Load Balancing, Okta, SC Clearance, Ws-federation, Containerization, Pingfederate, Docker - **Published:** August 9, 2026 - **Apply:** https://www.juju.com/job/00000000gmp5k2 ## About the Role Microsoft Azure,Microsoft Cloud,Secure Authentication,Single Sign-On (SSO) Certifications: CompTIA Security+ CE | CompTIA - CompTIA Experience: 15 + years of related experience, + Active Secret Clearance at minimum. Interim Secret Clearances are not allowed. + Bachelor's Degree in a related technical discipline, or the equivalent combination of education, technical certifications or training, or work experience. + DoD 8570/8140 IAT Level II certification (Security+ CE or higher) Required Skills/Knowledge: + 15+ years of experience in enterprise identity architecture, ICAM engineering, authentication platforms, or federation technologies. + Deep expertise designing and leading enterprise-scale ADFS and IdP solutions. + Proven leadership architecting identity systems for large regulated environments supporting millions of users. + Advanced understanding of authentication, authorization, identity assurance, federation protocols, and Zero Trust identity pillars. + Strong experience with SAML, OAuth, OIDC, WS-Federation, JWT, PKI, smart card authentication, and MFA architectures. + Architecture-level experience integrating mission applications and APIs with enterprise IdP and federation platforms. + Expert-level proficiency with Active Directory, LDAP directories, identity repositories, and claims-based identity systems. + Hands-on experience designing enterprise token rules, claims mappings, federation workflows, and trust policies. + Expertise with Windows and Linux server platforms in identity contexts. + Experience deploying identity COTS products in secure environments. + Excellent communication skills, with ability to provide guidance to engineers and influence leadership. + Proven success driving large-scale identity initiatives from architecture to implementation. Desired Skills/Knowledge: + Experience designing and supporting highly available ADFS farms with Web Application Proxy (WAP), load balancing, and disaster recovery architectures. + Experience with Microsoft Entra ID (Azure AD), PingFederate, PingAccess, PingDirectory, Okta, Keycloak, or similar enterprise authentication platforms. + Experience supporting DoD Enterprise ICAM, Federation Hub, or mission partner federation initiatives + Experience implementing federation solutions for coalition, partner, or cross-organizational environments + Experience supporting NIST 800-63 Identity Assurance Levels (IAL), Authenticator Assurance Levels (AAL), and Federation Assurance Levels (FAL) + Experience implementing phishing-resistant authentication technologies and passwordless authentication solutions. + Experience supporting Zero Trust Architecture and identity-centric security initiatives. + Familiarity with PowerShell scripting and automation for ADFS administration. + Experience supporting enterprise monitoring, performance tuning, and capacity planning for authentication services supporting millions of identities. + Experience with Active Directory Certificate Services (AD CS) and enterprise PKI. + Familiarity with container technologies such as Docker and Kubernetes. + Familiarity with DoD PKI, CAC authentication, derived credentials, and certificate lifecycle management. + Experience supporting highly available, mission-critical enterprise authentication environments. ## Description GDIT is seeking a highly experienced Principal ICAM Architect and Identity Provider Engineer to lead enterprise-scale authentication and federation strategy across the Department of Defense. This role serves as a senior technical authority responsible for defining architecture, guiding engineering teams, and delivering resilient Identity Provider (IdP) services that support secure authentication for more than 4 million DoD enterprise identities., The ideal candidate brings 15+ years of deep experience in identity architecture, enterprise authentication platforms, federation engineering, and strategic ICAM modernization. As a Principal Engineer, you will define enterprise standards, drive Zero Trust-aligned identity strategies, and provide authoritative guidance across mission-critical authentication ecosystems. You will serve as a senior technical leader partnering with cybersecurity, infrastructure, and application teams to evolve enterprise identity capabilities. + * Serve as the enterprise technical lead and architect for Identity Provider services across DoD, driving long-term ICAM strategy, modernization, and architectural governance.* Architect, build, and evolve large-scale ADFS and modern IdP platforms to deliver secure, resilient authentication and federation for millions of identities.* Define enterprise trust architectures, federation models, and cross-boundary identity integration patterns with internal DoD components, mission partners, and external organizations.* Lead design and architecture of authentication solutions leveraging SAML, OAuth, OpenID Connect (OIDC), WS-Federation, JWT, and certificate-based technologies.* Set technical direction for onboarding applications, APIs, and enterprise services into the authentication ecosystem, ensuring alignment with Zero Trust and DoD ICAM standards.* Develop enterprise-wide policies, claims rule frameworks, token issuance patterns, identity assurance levels, and authorization logic.* Provide principal-level oversight for MFA, phishing-resistant authentication, Conditional Access, and passwordless identity technologies.* Act as the senior escalation point for the most complex trust, certificate, federation, and token issues impacting mission-critical workloads.* Architect highly available, fault-tolerant authentication platforms incorporating advanced load balancing, multi-region resiliency, failover, and operational continuity strategies.* Produce authoritative technical documentation including architecture roadmaps, engineering standards, reference architectures, integration guides, and operational frameworks.* Lead and mentor engineering teams, provide guidance during Agile development cycles, and champion continuous improvement across authentication services.* Identify enterprise risks, drive mitigation strategies, and advise senior leadership on authentication posture, ICAM modernization plans, and Zero Trust progress. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)