ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Fort Meade, MD
Salary
$140,250–$189,750 / yr
Posted
72 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $184k
This role $165k
$131k $231k
below market most similar roles pay here above market

This role pays less than 56% of similar roles. Most pay $151,231–$216,271 — the blue band above. At the midpoint, this role pays about $165k versus about $184k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

The ICAM Identity Provider (IdP) Engineer - Enterprise Authentication Services joins the IT Infrastructure and Operations team to support a large line of business delivering enterprise-scale Identity, Credential, and Access Management capabilities. This role involves designing, integrating, operating, and maintaining enterprise Identity Provider services for the DoD ICAM mission. You will configure federation trust relationships, manage Microsoft Active Directory Federation Services (ADFS) infrastructure, and implement authentication solutions using SAML, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation. Key responsibilities include supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), and certificate-based authentication while developing claims rules and attribute mappings. You will work with cybersecurity and cloud teams to achieve Zero Trust Architecture objectives, troubleshooting complex identity issues across large-scale platforms to ensure secure, resilient authentication for millions of users.

What you'll do

  • Support the design, configuration, and sustainment of enterprise Identity Provider (IdP) services.
  • Administer and maintain Microsoft Active Directory Federation Services (ADFS) infrastructure.
  • Configure federation trust relationships with internal and external Identity Providers and Service Providers.
  • Implement and troubleshoot authentication solutions using SAML, OAuth 2.0, OpenID Connect, and WS-Federation.
  • Develop and maintain authentication policies, claims rules, attribute mappings, and token issuance configurations.
  • Support enterprise Single Sign-On (SSO), Multi-Factor Authentication (MFA), and phishing-resistant mechanisms.
  • Monitor and resolve authentication, federation, trust, certificate, and token issues.
  • Create technical documentation including architecture diagrams, SOPs, and integration guides.

What we're looking for

  • Must be a US Citizen.
  • Must possess an active Secret Clearance.
  • Must have a Bachelor's degree in a related technical field or an equivalent combination of education, certifications, and experience.
  • Must hold a DoD 8570/8140 IAT Level II certification, such as Security+ CE or higher.
  • Must have at least 3 years of experience supporting Identity and Access Management (IAM), Authentication, Federation, or ICAM-related technologies.
  • Must have experience supporting or implementing Microsoft ADFS in enterprise environments.
  • Must have experience with PKI, certificate-based authentication, smart cards, or MFA.
  • Must have experience with SAML, OAuth, OIDC, WS-Federation, and related identity technologies.

More like this

Similar roles

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Fort Meade, MD 40 days ago $140,250–$189,750
SAML OAuth 2.0 OpenID Connect (OIDC) WS-Federation Identity and Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) Active Directory LDAP PKI Certificate-based Authentication Microsoft Entra ID PingFederate PingAccess Okta Keycloak PowerShell Docker Kubernetes Zero Trust Architecture Agile
5+ yrs exp

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Remote (Falls Church, VA) 80 days ago $170,000–$230,000
Active Directory Domain Services (AD DS) SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Microsoft Entra ID Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Single Sign-On (SSO) PKI Certificate-based Authentication LDAP PowerShell Docker Kubernetes Zero Trust Architecture WS-Federation JWT PingFederate Okta
8+ yrs exp Remote

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Remote (Falls Church, VA) 80 days ago $170,000–$230,000
Active Directory Domain Services (AD DS) SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Microsoft Azure Microsoft Entra ID Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Single Sign-On (SSO) PKI Certificate-based Authentication LDAP PowerShell Docker Kubernetes Zero Trust Architecture Agile JWT WS-Federation
8+ yrs exp Remote

Identity Provider Operations Engineer

Booz Allen Hamilton

McLean, VA +1 54 days ago
PingFederate Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Python Java JavaScript PowerShell Groovy RESTful APIs Active Directory LDAP SCIM CI/CD AWS Cognito Azure AD B2C Google Cloud Identity MFA Zero Trust

Identity Provider Operations Engineer

Booz Allen Hamilton

Riverdale, MD +3 59 days ago
PingFederate Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Python Java JavaScript PowerShell Groovy RESTful APIs Active Directory LDAP SCIM CI/CD AWS Cognito Azure AD B2C Google Cloud Identity Zero Trust MFA

Senior Identity & Access Management (IAM) Engineer

Allstate

Remote (IL) 61 days ago $98,100–$167,850
Identity and Access Management (IAM) SAML OAuth OpenID Connect (OIDC) Python JavaScript Groovy YAML PowerShell IBM Verify Identity Access IBM Verify Access IBM Security Access Manager (ISAM) PingOne Advanced Identity Cloud (PAIC) Ping Access PingFederate PingAM Okta ForgeRock Active Directory LDAP SSO Agile Scrum MFA IGA PAM
5+ yrs exp Remote