ICAM Identity Provider (IdP) Engineer – Enterprise Authentication Services

About This Opportunity

Our talent team at Get A Job.ai is representing a confidential federal technology client seeking an ICAM Identity Provider (IdP) Engineer to support enterprise-scale authentication services. This fully remote position focuses on designing, developing, and maintaining Identity Provider services that secure authentication and federation for millions of enterprise identities within a large government environment.

The ideal candidate brings deep hands-on experience with Microsoft Active Directory Federation Services (ADFS), enterprise authentication protocols, and federation technologies. You'll work on highly available authentication services, federation trust management, single sign-on (SSO), multi-factor authentication (MFA), and secure application integration across a mission-critical infrastructure.

Responsibilities

• Design, configure, and maintain enterprise Identity Provider (IdP) services supporting large-scale identity populations
• Engineer and administer Microsoft Active Directory Federation Services (ADFS) infrastructure for enterprise authentication and federation
• Configure and maintain federation trust relationships with internal and external Identity Providers, Service Providers, and mission partners
• Implement and troubleshoot authentication solutions using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Federation, and certificate-based authentication
• Support onboarding and integration of enterprise applications into the authentication ecosystem
• Develop authentication policies, claims rules, attribute mappings, token issuance policies, and authorization workflows
• Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and phishing-resistant authentication capabilities
• Collaborate with cybersecurity, Active Directory, cloud, infrastructure, and application teams on secure authentication services
• Support Zero Trust Architecture implementation through modern authentication and identity assurance
• Monitor, troubleshoot, and resolve complex authentication, federation, certificate, and token issues
• Develop technical documentation including architecture diagrams, integration guides, SOPs, and operational procedures
• Participate in Agile development activities and continuous service improvement initiatives

What We're Looking For

Required Qualifications:

• Active Secret clearance (Interim clearances not accepted)
• Bachelor's degree in a related technical discipline, or equivalent combination of education, certifications, or work experience
• DoD 8570/8140 IAT Level II certification (Security+ CE or higher)
• Minimum 8 years of experience supporting Identity and Access Management (IAM), Authentication, Federation, or ICAM solutions within government or regulated environments
• Strong experience designing, implementing, and supporting Microsoft Active Directory Federation Services (ADFS)
• Extensive experience implementing enterprise Identity Provider services for large user populations
• Deep understanding of authentication, authorization, federation, and identity assurance concepts
• Experience implementing and troubleshooting SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Federation, and JWT technologies
• Experience with PKI, certificate-based authentication, smart card authentication, and MFA solutions
• Experience integrating applications, APIs, and enterprise services with federation platforms
• Experience with Active Directory, LDAP directories, and enterprise identity repositories
• Experience configuring claims, attribute mappings, policy enforcement, and federation workflows
• Experience supporting Linux and/or Windows Server environments
• Experience with Agile development environments and associated tools
• Strong written and verbal communication skills
• Self-starter capable of driving complex technical efforts independently

Desired Qualifications:

• Experience designing highly available ADFS farms with Web Application Proxy (WAP), load balancing, and disaster recovery architectures
• Experience with Microsoft Entra ID (Azure AD), PingFederate, PingAccess, PingDirectory, Okta, Keycloak, or similar platforms
• Experience supporting DoD Enterprise ICAM or mission partner federation initiatives
• Experience with NIST 800-63 Identity Assurance Levels (IAL), Authenticator Assurance Levels (AAL), and Federation Assurance Levels (FAL)
• Experience implementing phishing-resistant and passwordless authentication technologies
• Experience supporting Zero Trust Architecture and identity-centric security initiatives
• PowerShell scripting and automation for ADFS administration
• Experience with enterprise monitoring, performance tuning, and capacity planning for authentication services
• Experience with Active Directory Certificate Services (AD CS) and enterprise PKI
• Familiarity with Docker and Kubernetes
• Experience with DoD PKI, CAC authentication, and derived credentials

How We Work With You

Get A Job.ai is a recruiting firm representing this confidential client. When you apply through our platform at getajob.ai, one of our specialized recruiters will review your qualifications and conduct an initial screening. If there's a strong match, we'll submit your profile to our client for consideration. Please do not contact the client directly—all communication and coordination will flow through our recruitment team to ensure the best experience for everyone involved.

Pay

Pay information will be discussed during the screening process with our recruiting team.

Equal Employment Opportunity: Get A Job.ai is committed to equal employment opportunity. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.