ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Fort Meade, MD
Salary: $140,250–$189,750 / yr
Posted: 47 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $182k

This role $165k

$131k $230k

below market most similar roles pay here above market

This role pays less than 55% of similar roles. Most pay $149,875–$214,428 — the blue band above. At the midpoint, this role pays about $165k versus about $182k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1349 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1167 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

Role Posting Log in to save

The ICAM Identity Provider (IdP) Engineer - Enterprise Authentication Services joins the IT Infrastructure and Operations team to support a large line of business delivering enterprise-scale Identity, Credential, and Access Management capabilities. This role involves designing, integrating, operating, and maintaining enterprise Identity Provider services for over 4 million identities. Key responsibilities include administering Microsoft Active Directory Federation Services (ADFS) infrastructure, configuring federation trust relationships, and implementing authentication solutions. The engineer will manage SAML, OAuth 2.0, OpenID Connect (OIDC), WS-Federation, and certificate-based authentication while supporting Single Sign-On, Multi-Factor Authentication, and Conditional Access. Technical skills required include experience with PKI, LDAP, and Windows or Linux server environments. The work focuses on delivering secure authentication services and contributing to Zero Trust Architecture objectives for mission-critical workloads.

Skills

SAML OAuth 2.0 OpenID Connect (OIDC) WS-Federation Identity and Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) Active Directory LDAP PKI Certificate-based Authentication Microsoft Entra ID PingFederate PingAccess Okta Keycloak PowerShell Docker Kubernetes Zero Trust Architecture Agile

What you'll do

Support the design, configuration, and sustainment of enterprise Identity Provider (IdP) services.
Administer and maintain Microsoft Active Directory Federation Services (ADFS) infrastructure.
Configure federation trust relationships with internal and external Identity Providers and Service Providers.
Implement and troubleshoot authentication solutions using SAML, OAuth 2.0, OpenID Connect, and certificate-based authentication.
Develop and maintain authentication policies, claims rules, attribute mappings, and token issuance configurations.
Support enterprise Single Sign-On (SSO), Multi-Factor Authentication (MFA), and phishing-resistant mechanisms.
Monitor and resolve authentication, federation, trust, certificate, and token issues.
Create technical documentation including architecture diagrams, SOPs, and integration guides.

What we're looking for

Must be a US Citizen.
Must possess an active Secret Clearance.
Must have a Bachelor's degree in a related technical field or an equivalent combination of education, certifications, and experience.
Must possess a DoW 8570/8140 IAT Level II certification (Security+ CE or higher).
Must have 5+ years of related experience.
Must have at least 3 years of experience supporting Identity and Access Management (IAM), Authentication, Federation, or ICAM-related technologies.
Must have experience supporting or implementing Microsoft ADFS in enterprise environments.
Must have experience with SAML, OAuth 2.0, OIDC, WS-Federation, PKI, and MFA.

Similar roles

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Fort Meade, MD 80 days ago $140,250–$189,750

SAML OAuth 2.0 OpenID Connect (OIDC) WS-Federation Identity and Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) PKI LDAP Active Directory Microsoft Entra ID PingFederate PingAccess Okta Keycloak PowerShell Docker Kubernetes Zero Trust Architecture

3+ yrs exp

Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Remote (Falls Church, VA) 88 days ago $170,000–$230,000

Active Directory Domain Services (AD DS) SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Microsoft Azure Microsoft Entra ID Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Single Sign-On (SSO) PKI Certificate-based Authentication LDAP PowerShell Docker Kubernetes Zero Trust Architecture Agile JWT WS-Federation

8+ yrs exp Remote

Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Remote (Falls Church, VA) 88 days ago $170,000–$230,000

Active Directory Domain Services (AD DS) SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Microsoft Entra ID Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Single Sign-On (SSO) PKI Certificate-based Authentication LDAP PowerShell Docker Kubernetes Zero Trust Architecture WS-Federation JWT PingFederate Okta

8+ yrs exp Remote

Save

Identity Provider Operations Engineer

Booz Allen Hamilton

McLean, VA +1 62 days ago

PingFederate Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Python Java JavaScript PowerShell Groovy RESTful APIs Active Directory LDAP SCIM CI/CD AWS Cognito Azure AD B2C Google Cloud Identity MFA Zero Trust

Save

Identity Provider Operations Engineer

Booz Allen Hamilton

Riverdale, MD +3 67 days ago

Save

Senior Identity & Access Management (IAM) Engineer

Allstate

Remote (IL) 68 days ago $98,100–$167,850

Identity and Access Management (IAM) SAML OAuth OpenID Connect (OIDC) Python JavaScript Groovy YAML PowerShell IBM Verify Identity Access IBM Verify Access IBM Security Access Manager (ISAM) PingOne Advanced Identity Cloud (PAIC) Ping Access PingFederate PingAM Okta ForgeRock Active Directory LDAP SSO Agile Scrum MFA IGA PAM

5+ yrs exp Remote

Save