Senior Systems Engineer

Role Summary A Senior Systems Engineer specializing in Cross-Cutting Support and ICAM Enterprise Architecture is sought to support critical identity, credential, and access management enhancement initiatives. This technical position involves designing, engineering, and implementing secure, identity-centric access control frameworks across diverse enterprise architectures. The role provides strategic technical leadership for enterprise identity management systems, ensuring alignment with federal security standards and best practices. Responsibilities Serve as the primary technical authority for enterprise identity management and access control frameworks. Lead the modernization of legacy access controls into secure ICAM solutions. Manage enterprise directories, federation, authentication, authorization, and single sign-on (SSO) protocols. Architect identity lifecycles, user provisioning workflows, and privilege management controls. Design and deploy Zero Trust identity principles based on NIST SP 800-207 across network hubs. Configure and manage enterprise PKI systems, credentials, and authenticators. Implement logical and physical access control systems, including MFA, SSO, and privileged access management (PAM). Build federated identity services for secure interoperability with mission partners. Conduct root cause analysis, privilege audits, and system performance tuning to optimize security posture. Develop technical interfaces, architectures, data flows, and compliance documentation to support ICAM initiatives. Own the overarching hybrid identity strategy and ensure interoperability across enterprise identity systems. Qualifications High school diploma with 10+ years of relevant experience or equivalent technical background. Active DoD 8570 IAT Level II certification or higher (e.g., Security+ CE, CySA+). Extensive knowledge of federated identity protocols including SAML, OAuth, OIDC, and LDAP/Active Directory architecture. Hands-on experience managing Smart Card/CAC authentication and PKI certificate validation. Proven expertise implementing NIST SP 800-207 Zero Trust principles within enterprise networks. This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required. Strong understanding of enterprise identity tools and frameworks, including SailPoint, Okta, Microsoft Entra ID, or Ping Identity. Familiarity with integrating data governance with ICAM solutions to enforce data access controls. Experience with RESTful API authorization protocols, secure gateways, and data schema security standards. Publishing Pay Range: $60.00 – $65.00 hourly This position offers a hybrid schedule, with time split between the office and remote work.