SITEC - Red Hat IDM / Identity Management Systems Engineer - Mac

Peraton requires Systems Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) - 3 EOM. This position is located at MacDill AFB in Florida.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365.

The Identity Management Engineer is a crucial member of our IT department, offering advanced tier-three engineering and operational support in alignment with the SIE OPORD. This role requires a comprehensive understanding of enterprise and government technology systems, paired with strong capabilities in analytical troubleshooting, systems architecture, and system design disciplines.

Effective communication skills are essential to facilitate interactions across both technical engineering teams and non-technical stakeholders. The candidate will possess thorough knowledge of systems engineering methodologies, leveraging metric- and data-driven insights to optimize platform performance. Active participation in architecture working groups, design reviews, and rigorous system testing is essential, alongside the ability to formulate and execute strategic technical roadmaps. A solid grasp of the full development lifecycle-encompassing requirements specification, systems documentation, and quality assurance-is vital, accompanied by robust project management skills.

Technical Proficiency

• Operating Systems & Core Architecture: In-depth technical mastery of Enterprise Linux operating systems (e.g., Red Hat Enterprise Linux / RHEL 8 and 9) and associated open-source enterprise directory platforms.
• Red Hat IdM / FreeIPA: Proven track record architecting, deploying, securing, and maintaining Red Hat Identity Management (IdM) and FreeIPA environments at enterprise scale, supporting over 80,000 users.
• Underlying Directory Technologies: Comprehensive, low-level understanding of core Identity Management protocols and technologies, including LDAP (389 Directory Server), Kerberos authentication, integrated DNS, Certificate System / Public Key Infrastructure (PKI), and SSSD (System Security Services Daemon).
• Enterprise Identity Integration & Trusts: Skilled in establishing, configuring, and maintaining Cross-Forest Trusts between Linux Identity Management domains and Microsoft Active Directory (AD DS), ensuring seamless cross-platform Kerberos authentication, identity mapping, and centralized authorization across the enterprise., * Infrastructure Integration: Integrate Red Hat IdM and Linux directory infrastructure seamlessly with corporate network systems, perimeter security appliances, messaging platforms, remote access solutions (VPN/PAM), and virtualized/cloud infrastructure.
• Security & Compliance Governance: Define, document, and enforce baseline configuration standards and best practices for Linux identity infrastructure, ensuring strict compliance with DoD STIGs, CIS Benchmarks, and SELinux enforcing policies.
• Lifecycle Management: Oversee the complete lifecycle of mission-critical identity services-from conceptual design and architectural review to deployment, replication agreement tuning, backup/disaster recovery, and ongoing maintenance.
• Infrastructure as Code & Automation: Develop, implement, and maintain automation workflows utilizing Ansible, Bash, and Python to streamline IdM deployment, configuration drift remediation, and automated provisioning.
• Mentorship & Tier Support Escalation: Serve as the final escalation authority (Tier 3) for directory service and authentication outages. Mentor Tier 2 Directory Service administrators and conduct technical knowledge-transfer sessions on enterprise Linux and identity technologies.
• Strategic Innovation: Lead the evaluation, prototyping, and rollout of emerging identity and security technologies to support and elevate organizational mission readiness.

Availability for scheduled on-call rotations, weekend maintenance windows, and shift work as required by operational necessity., * Highly Recommended: Red Hat Certified Engineer (RHCE) or Red Hat Certified Specialist in Identity Management

• Acceptable Alternatives & Supporting Certifications:
• CompTIA Linux+ or Linux Professional Institute Certification (LPIC-2 / LPIC-3)
• Microsoft Certified: Identity and Access Administrator Associate (with verified enterprise Linux integration experience)
• VMware Certified Professional (VCP)
• Microsoft Certified: Azure Solutions Architect Expert

• Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA
• DoD 8570 IAT II Certification
• DoW TS/SCI clearance
• Must be DoW 8140 compliant under the Work Role Code 451 - System Administrator - Intermediate level or higher
• Minimum of four (4) years of dedicated, hands-on experience designing and operating Red Hat Identity Management (IdM), FreeIPA, or complex enterprise-scale LDAP/Kerberos environments.
• Minimum of six (6) years of progressive, relevant information technology (IT) experience.
• Demonstrated history of administering and hardening Enterprise Linux servers in multi-site, high-availability, mission-critical environments.
• Strong practical experience implementing Identity and Access Management (IAM) controls, including Role-Based Access Control (RBAC), Host-Based Access Control (HBAC), Pluggable Authentication Modules (PAM), and sudo rule management within IdM.
• Prior proven background operating within large-scale enterprise or federal/government IT ecosystems.
• Advanced scripting capabilities in Bash and Python for identity lifecycle workflows and administrative task automation.
• Focused background in systems engineering with an emphasis on scalability, high availability, and performance optimization.
• Proven adherence to structured systems engineering methodologies and change governance processes.
• Superior collaboration, verbal communication, and stakeholder coordination abilities.
• Advanced technical documentation and architectural diagramming skills.

Target Salary Range: $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we’re keeping people around the world safe and secure., Peraton provides USSOCOM, its Component Commands, Theater Special Operations Commands (TSOCs), deployed forces, CIO/J6, and end-users with high-quality IT platform and network services over an eight-year period.