Zero Trust ICAM & PKI SME

General Dynamics

Confirmed live today High trust

Quick summary

Work type
On-site
Location
MacDill AFB, FL
Salary
$129,813–$172,500 / yr
Posted
40 days ago
Freshness
Confirmed live today
Nearby
99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $187k
This role $151k
$118k $242k
below market most similar roles pay here above market

This role pays less than 78% of similar roles. Most pay $155,000–$219,537 — the blue band above. At the midpoint, this role pays about $151k versus about $187k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Zero Trust ICAM & PKI SME

Role Posting Log in to save

The Zero Trust ICAM & PKI SME joins the IT Infrastructure and Operations team to support infrastructure security for the CITS contract for USCENTCOM. This role involves leading the engineering, deployment, and operational integration of identity-centric, credentialing, and access control solutions aligned with DoD Zero Trust principles. You will design and maintain enterprise Identity Management solutions, architect Public Key Infrastructure (PKI) systems, and manage access control models including RBAC, ABAC, and PBAC. Key responsibilities include configuring Certification Authorities, managing Hardware Security Modules, and administering Privileged Access Management platforms like Delinea and SailPoint. You will utilize technologies such as Active Directory, SAML 2.0, OAuth, and OIDC while performing vulnerability scanning and STIG remediation to ensure secure network enclave operations and cryptographic integrity.

Skills

Zero Trust PKI ICAM Identity Management Privileged Access Management Identity Governance and Administration Active Directory SAML 2.0 OAuth 2.0 OpenID Connect mTLS SCEP EST ACME X.509 Hardware Security Modules Python PowerShell Bash SailPoint Delinea Keyfactor Thales F5 Microsoft LDAP RBAC ABAC PBAC IBAC STIG FIPS

What you'll do

  • Design, implement, and maintain enterprise Identity Management solutions and automated account provisioning pipelines.
  • Architect and operate Public Key Infrastructure (PKI) solutions aligned with DoD and NSS standards.
  • Configure and maintain Certification Authorities, Registration Authorities, and Hardware Security Modules.
  • Automate certificate issuance, renewal, and revocation across web servers, endpoints, and secure channels.
  • Deploy and administer Privileged Access Management (PAM) and Identity Governance and Administration (IGA) platforms.
  • Configure fine-grained access control models including RBAC, ABAC, PBAC, and IBAC.
  • Troubleshoot complex federation and Single Sign-On (SSO) integrations using SAML 2.0, OAuth 2.0, and OIDC.
  • Perform vulnerability scanning, STIG remediation, and patching across all ICAM and PKI server environments.

What we're looking for

  • Must be a U.S. Citizen.
  • Must currently possess an active Secret security clearance.
  • Must be able to obtain a Top Secret/SCI security clearance.
  • Must have 10+ years of related engineering and operations experience in enterprise IT and cybersecurity.
  • Must have 10+ years of experience in enterprise identity architectures and directory infrastructure.
  • Must have a Bachelor's Degree in a related discipline or six years of real-world or military experience in information assurance.
  • Must possess applicable DoD 8140 / DoD 8570 IAT Level II/III or IAM Level II/III Certification.
  • Must have expertise in Access Management, Credentialing, Identity Management, and PKI Certificate Management.

Related searches

More Zero Trust ICAM & PKI SME jobs Zero Trust ICAM & PKI SME jobs in MacDill AFB All jobs at General Dynamics

More like this

Similar roles

Zero Trust Information Systems Security Engineer

Booz Allen Hamilton

Honolulu, HI 68 days ago
Zero Trust ICAM SAML OAuth 2.0 OpenID Connect Active Directory LDAP SailPoint Radiant Logic Ping Federate Delinea Python Ansible Terraform Puppet Chef PowerShell Splunk Elastic Logstash Kibana Cribl Confluent Windows Linux TCP IP DNS DHCP HTTP HTTPS IDS IPS Firewalls AI ML NIST 800-207
3+ yrs exp
Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Fort Meade, MD 40 days ago $140,250–$189,750
SAML OAuth 2.0 OpenID Connect (OIDC) WS-Federation Identity and Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) Active Directory LDAP PKI Certificate-based Authentication Microsoft Entra ID PingFederate PingAccess Okta Keycloak PowerShell Docker Kubernetes Zero Trust Architecture Agile
5+ yrs exp
Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Fort Meade, MD 72 days ago $140,250–$189,750
SAML OAuth 2.0 OpenID Connect (OIDC) WS-Federation Identity and Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) PKI LDAP Active Directory Microsoft Entra ID PingFederate PingAccess Okta Keycloak PowerShell Docker Kubernetes Zero Trust Architecture
3+ yrs exp
Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Remote (Falls Church, VA) 80 days ago $170,000–$230,000
Active Directory Domain Services (AD DS) SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Microsoft Azure Microsoft Entra ID Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Single Sign-On (SSO) PKI Certificate-based Authentication LDAP PowerShell Docker Kubernetes Zero Trust Architecture Agile JWT WS-Federation
8+ yrs exp Remote
Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Remote (Falls Church, VA) 80 days ago $170,000–$230,000
Active Directory Domain Services (AD DS) SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Microsoft Entra ID Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Single Sign-On (SSO) PKI Certificate-based Authentication LDAP PowerShell Docker Kubernetes Zero Trust Architecture WS-Federation JWT PingFederate Okta
8+ yrs exp Remote
Save

ICAM Engineer

Booz Allen Hamilton

Reston, VA +1 33 days ago $86,800–$198,000
OCI IAM SAML 2.0 OpenID Connect OAuth 2.0 SCIM LDAP Active Directory Zero Trust Terraform Ping Identity Microsoft Entra ID Okta ADFS RMF ICD 503 RBAC ABAC MFA SSO
8+ yrs exp
Save