> Markdown version of [/jobs/ext/2983425-identity-access-management-lead](https://www.wearedevelopers.com/jobs/ext/2983425-identity-access-management-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity & Access Management Lead - **Company:** General Dynamics Information Technology - **Location:** Chantilly, VA, United States - **Experience:** Expert - **Salary:** $212,500.0 - $287,500.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Active Directory Federation Services, Artificial Intelligence, Amazon Web Services, Systems Engineering, Microsoft Azure, Cloud Computing, Configuration Management, Dynamic Host Configuration Protocol, Distributed File Systems, Domain Name System (DNS), Multi-Factor Authentication, VMware ESX Servers, Identity and Access Management, Information Systems Security Architecture Professional, Lightweight Directory Access Protocols (LDAP), Citrix XenApp, System Center Operations Management, System Center Configuration Manager, Windows Servers, OAuth, OpenID, Public Key Infrastructure, Windows PowerShell, Openid Connect, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Security Content Automation Protocol, Single Sign-On, Virtualization Technology, Software Vulnerability Management, HybridCloud, Deployment Automation, Splunk, Dynatrace - **Published:** September 18, 2026 - **Apply:** https://gdit.wd5.myworkdayjobs.com/External_Career_Site/job/USA-VA-Chantilly/Identity---Access-Management-Lead---TS-SCI-with-Polygraph_RQ228603/apply ## About the Role Years of Experience 5 + years of related experience * may vary based on technical training, certification(s), or degree Certification ## Description Own your opportunity to serve as a critical component of our nation's safety and security. Make an impact by using your expertise to protect our country from threats., The Identity & Access Management Lead serves as the lead engineer and technical authority for a complex privileged access management ecosystem supporting password vaulting, just-in-time administration, and hardened identity operations. This role requires deep expertise in Active Directory engineering, enterprise identity security, and automation, combined with strong leadership capabilities to guide a small team of engineers delivering mission-critical authentication and access services. The ideal candidate brings extensive experience designing, securing, and modernizing Windows-based identity platforms across large, multi-domain environments. They demonstrate exceptional problem-solving skills, clear communication, and a proven ability to operate independently or collaboratively within cross-functional teams. Core Responsibilities: * Lead Identity Architecture for a privileged access management solution, including password vaulting, JIT access workflows, and Tier-0 protection aligned to Zero Trust principles. * Design, secure, and maintain Windows-based Active Directory forests and domains, including Group Policy, DNS, DHCP, PKI, MFA and hybrid identity integrations * Develop automation and tooling using PowerShell to standardize operations, reduce manual effort, and improve reliability across identity services. * Oversee engineering lifecycle delivery-requirements refinement, architecture documentation, installation instructions, deployment plans, and O&M support. * Engineer solutions for geographically dispersed environments, hybrid cloud integrations, and automated deployment via configuration management platforms. * Harden identity infrastructure to meet STIG, SCAP, and enterprise security compliance requirements. * Perform advanced systems engineering, including modeling, simulation, analysis, and architectural enhancements. * Plan and direct OS upgrades, directory modernization efforts, and enterprise-wide identity improvements. * Develop technical documentation for new and existing systems, ensuring clarity, repeatability, and operational readiness. * Identify, analyze, and resolve complex system issues, including authentication failures, directory inconsistencies, and privileged access anomalies. * Provide training and technical guidance to engineers and operational support staff. * Serve as a client-facing liaison, ensuring requirements are met and technical solutions align with mission needs. * Maintain current knowledge of identity security, Windows infrastructure, and emerging directory technologies. * Manage and mentor a small engineering team, providing leadership, direction, and professional development. * Tier 0 & Cloud Identity plane governance: Serves as the primary authority for Tier 0 Access Plane Management across Azure and Microsoft Entra ID. Responsible for designing and enforcing strict identity boundary controls, privileged access management (PAM), and Directory-level security architectures, while overseeing secure application registration and single sign-on (SSO) integrations using SAML 2.0, OpenID Connect (OIDC), and OAuth. Preferred Experience & Technical Strengths * Directory Services: Active Directory, Group Policy, LDAP, DNS, ADCS, OCSP, DHCP, DFS, ADFS, Entra ID, hybrid identity * Security & Identity: PKI, MFA, privileged access controls, STIG compliance, ACAS, vulnerability mitigation * Automation & Systems: PowerShell, Windows Server, SCCM/MCM, SCOM, Splunk, Dynatrace * Cloud & Virtualization: Azure, AWS, VMware ESX, Citrix Xen Desktop/App * Leadership: Technical leadership, identity operations management, cross-functional coordination ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 210: AI Agents Are Go! Is MCP Dead? LLMs Crack Anonymity](https://www.wearedevelopers.com/magazine/709-dev-digest-210-ai-agents-are-go-is-mcp-dead-llms-crack-anonymity) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)