below marketmost similar roles pay hereabove market
This role pays less than
88%
of similar roles. Most pay
$142,500–$197,990
— the blue band above.
At the midpoint, this role pays about
$123k
versus about
$170k
for comparable roles.
Based on 240 similar postings.
Employer
About General Dynamics
General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.
General Dynamics currently has
1377 open roles
on FindRole.
Listed pay typically runs
$124,093–$150,385
across 1184 roles with salary data.
The ICAM Systems Engineer & Manager serves as a senior operational leader and Team Lead overseeing enterprise Domain Services and Identity, Credential, and Access Management for the US BICES/US BICES X mission. This role involves managing a small team of admins and engineers to provide hands-on leadership across Active Directory, DNS/DHCP, and group policy infrastructure within a mission-critical, 24/7 globally distributed environment. Key responsibilities include spearheading identity lifecycle management, driving the transition of legacy directory structures toward Zero Trust compliance, and enforcing NIST SP 800-207 standards. The position requires technical proficiency in Windows Server Administration, DNSSEC, and Multi-Factor Authentication. The engineer will resolve critical authentication outages, manage user accounts, and ensure infrastructure hardening through RMF and DISA STIG compliance to maintain secure access controls.
Direct the engineering, security hardening, and daily operations of enterprise Active Directory, DNS, and DHCP infrastructure.
Lead the transition of legacy directory structures into a Zero Trust framework using tiered administration and micro-segmentation.
Manage the full identity lifecycle, including user account administration, MFA integration, and authentication protocol deprecation.
Oversee a team of administrators and engineers to resolve critical identity outages and provide 24/7 emergency response.
Enforce infrastructure compliance with NIST SP 800-207, RMF, and DISA STIG standards.
Develop and document technical training, operational procedures, and onboarding processes for the identity management workforce.
Partner with security teams to perform continuous monitoring, audit readiness, and rapid vulnerability remediation.
What we're looking for
Must be a US Citizen.
Must possess and maintain a Top Secret/SCI Security Clearance.
Must have 5+ years of experience supporting enterprise operations in mission-critical DOD/IC environments.
Must have 5+ years of leadership experience in identity management, Active Directory, or core domain services operations.
Must have experience supporting globally distributed classified environments with DoD, IC, or coalition networks.
Must have technical proficiency in Windows Server Administration, Active Directory Domain Services, Group Policy Management, DNSSEC, DHCP, and identity architecture.
Must hold an IAT Level Baseline Certification (e.g., Security+, CASP+, CISSP, CCNP, or CySA+).
Must hold GCWN or Microsoft Identity Certifications (preferred); PMP, ITIL V4, or Agile (preferred).
Radiant Logic
RadiantOne
Identity and Access Management (IAM)
LDAP
Active Directory
Java
XML
SCIM
REST APIs
Docker
Kubernetes
Linux
Windows Server
Agile
SDLC
Zero Trust Architecture
NIST 800-63
ABAC
IAM
Active Directory
LDAP
MFA
Privileged Access Management
CyberArk
Delinea
Azure
AWS
PKI
PIV
EntraID
Microsoft Identity Manager
SailPoint
Saviynt
One Identity
Splunk
ELK Stack
IGA
Zero Trust
IAM
Active Directory
LDAP
Okta
Duo
CyberArk
Delinea
Azure
AWS
PKI
PIV
Microsoft Identity Manager
SailPoint
Saviynt
One Identity
Splunk
ELK Stack
IGA
PAM
Zero Trust