ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Confirmed live today High trust

Remote

Quick summary

Work type: Remote
Location: Falls Church, VA
Salary: $170,000–$230,000 / yr
Posted: 80 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $184k

This role $200k

$129k $241k

below market most similar roles pay here above market

This role pays more than 70% of similar roles. Most pay $151,231–$216,271 — the blue band above. At the midpoint, this role pays about $200k versus about $184k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

Role Posting Log in to save

The ICAM Identity Provider (IdP) Engineer - Enterprise Authentication Services joins the IT Infrastructure and Operations team to support a large line of business delivering enterprise-scale Identity, Credential, and Access Management capabilities. This role involves designing, developing, and maintaining enterprise Identity Provider services for over 4 million Department of Defense identities. Key responsibilities include engineering Microsoft Active Directory Federation Services infrastructure, managing federation trust relationships, and troubleshooting authentication solutions. The engineer will implement protocols such as SAML 2.0, OAuth 2.0, OpenID Connect, and WS-Federation while supporting Single Sign-On, Multi-Factor Authentication, and Zero Trust Architecture. Required technical skills include Active Directory Domain Services, Microsoft Azure, and PKI certificate-based authentication. The position focuses on providing secure, highly available authentication and federation for mission-critical enterprise applications.

Skills

Active Directory Domain Services (AD DS) SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Microsoft Azure Microsoft Entra ID Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Single Sign-On (SSO) PKI Certificate-based Authentication LDAP PowerShell Docker Kubernetes Zero Trust Architecture Agile JWT WS-Federation

What you'll do

Design, develop, and maintain enterprise Identity Provider (IdP) services for over 4 million identities.
Engineer and sustain Microsoft Active Directory Federation Services (ADFS) infrastructure for enterprise authentication.
Configure and maintain federation trust relationships with internal and external Identity Providers and Service Providers.
Implement authentication solutions using SAML 2.0, OAuth 2.0, OpenID Connect, and certificate-based authentication.
Develop authentication policies, claims rules, attribute mappings, and authorization workflows.
Support enterprise Single Sign-On (SSO), Multi-Factor Authentication (MFA), and phishing-resistant capabilities.
Monitor and resolve complex issues related to federation, certificates, tokens, and identity assertions.
Create technical documentation including architecture diagrams, integration guides, and standard operating procedures.

What we're looking for

Must be a US Citizen.
Must currently possess an active Secret Security Clearance.
Must possess a DoD 8570/8140 IAT Level II certification, such as Security+ CE or higher.
Must have a Bachelor's Degree in a related technical discipline or equivalent experience/certifications.
Must have 8+ years of experience supporting IAM, Authentication, Federation, or ICAM solutions in government or regulated environments.
Must have strong experience designing, implementing, and supporting Microsoft Active Directory Federation Services (ADFS).
Must have experience implementing and troubleshooting SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Federation, and JWT technologies.
Must have experience supporting PKI, certificate-based authentication, smart card authentication, and MFA solutions.

Similar roles

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Remote (Falls Church, VA) 80 days ago $170,000–$230,000

Active Directory Domain Services (AD DS) SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Microsoft Entra ID Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Single Sign-On (SSO) PKI Certificate-based Authentication LDAP PowerShell Docker Kubernetes Zero Trust Architecture WS-Federation JWT PingFederate Okta

8+ yrs exp Remote

Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Fort Meade, MD 72 days ago $140,250–$189,750

SAML OAuth 2.0 OpenID Connect (OIDC) WS-Federation Identity and Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) PKI LDAP Active Directory Microsoft Entra ID PingFederate PingAccess Okta Keycloak PowerShell Docker Kubernetes Zero Trust Architecture

3+ yrs exp

Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Fort Meade, MD 40 days ago $140,250–$189,750

SAML OAuth 2.0 OpenID Connect (OIDC) WS-Federation Identity and Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) Active Directory LDAP PKI Certificate-based Authentication Microsoft Entra ID PingFederate PingAccess Okta Keycloak PowerShell Docker Kubernetes Zero Trust Architecture Agile

5+ yrs exp

Save

Identity Provider Operations Engineer

Booz Allen Hamilton

McLean, VA +1 54 days ago

PingFederate Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Python Java JavaScript PowerShell Groovy RESTful APIs Active Directory LDAP SCIM CI/CD AWS Cognito Azure AD B2C Google Cloud Identity MFA Zero Trust

Save

Identity Provider Operations Engineer

Booz Allen Hamilton

Riverdale, MD +3 59 days ago

Save

Senior Identity & Access Management (IAM) Engineer

Allstate

Remote (IL) 61 days ago $98,100–$167,850

Identity and Access Management (IAM) SAML OAuth OpenID Connect (OIDC) Python JavaScript Groovy YAML PowerShell IBM Verify Identity Access IBM Verify Access IBM Security Access Manager (ISAM) PingOne Advanced Identity Cloud (PAIC) Ping Access PingFederate PingAM Okta ForgeRock Active Directory LDAP SSO Agile Scrum MFA IGA PAM

5+ yrs exp Remote

Save