This role pays more than
75%
of similar roles. Most pay
$145,000–$200,625
— the shaded band above.
At the midpoint, this role pays about
$200k
versus about
$173k
for comparable roles.
Based on 240 similar postings.
Employer
About General Dynamics
General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.
General Dynamics currently has
1123 open roles
on FindRole.
Listed pay typically runs
$124,093–$150,385
across 984 roles with salary data.
ICAM Identity Provider (IdP) Engineer - Enterprise Authentication Services joins a team providing enterprise-scale Identity, Credential, and Access Management capabilities for the Department of Defense. This role involves designing, developing, and maintaining high-availability Identity Provider services to secure authentication and federation for over four million identities. The engineer will manage Microsoft Active Directory Federation Services infrastructure, establish federation trust relationships with internal and external partners, and integrate applications into the ecosystem. Key responsibilities include configuring multi-factor authentication, single sign-on, and phishing-resistant capabilities while developing technical documentation and policy rules. The role requires expertise in Active Directory Domain Services, Microsoft Azure, SAML 2.0, OAuth 2.0, OpenID Connect, WS-Federation, and certificate-based authentication. Candidates must navigate complex identity assertion issues and support Zero Trust Architecture initiatives within a large-scale government environment using tools like PowerShell for automation.
Support enterprise Single Sign-On (SSO), Multi-Factor Authentication (MFA), and phishing-resistant capabilities.
Resolve complex issues related to certificates, tokens, identity assertions, and federation trust.
Create technical documentation including architecture diagrams, integration guides, and standard operating procedures.
What we're looking for
Must be a U.S. citizen.
Must possess an active Secret clearance (interim clearances are not accepted).
Must have a Bachelor's degree in a related technical discipline or equivalent experience and certifications.
Must hold a DoD 8570/8140 IAT Level II certification, such as Security+ CE or higher.
Must have at least 8 years of experience supporting IAM, authentication, federation, or ICAM solutions in government or regulated environments.
Must have extensive experience designing and implementing Microsoft Active Directory Federation Services (ADFS) and enterprise Identity Provider services.
Must be proficient in SAML 2.0, OAuth 2.0, OpenID Connect, WS-Federation, and JWT technologies.
Experience with high availability ADFS farms, multi-factor authentication, and Zero Trust Architecture is preferred.
Remote (Falls Church, VA)35 days ago
$170,000–$230,000
Active Directory
AD FS
Microsoft Azure
SAML 2.0
OAuth 2.0
OpenID Connect
WS-Federation
MFA
SSO
PKI
LDAP
PowerShell
Docker
Kubernetes
Zero Trust Architecture
Agile
Linux
Windows Server