The Digital Modernization sector within Leidos is seeking an Identity, Credential and Access Management Systems Engineer (formerly identity and access management / IdAM) to be responsible for the upkeep, configuration, and reliable operation of computer systems in support of DISA's Compartmented Enterprise Services Office (CESO) NOC.  The Systems Engineer will to contribute to the deployment and maintenance of an ICAM solution to serve as a comprehensive Identity as a Service (IDaaS) platform for CESO.

Primary Responsibilities

Deploy and maintain the ForgeRock IdP (identity and access management platform).Implement identity access management and controls, to include single sign on, identity federation, enterprise directory architecture, and resource provisioning.Demonstrate advanced understanding of business processes, internal control risk management, IT controls and related standardsIdentify and evaluate complex business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvementUnderstand complex business and information technology management processesInstall, integrate, and deploy ForgeRock products in client environments usingCommunicate to clients and partners aspects of both the product and the implementation at the technical and functional level appropriate for the situation.Work with the Identity Access Management team to continue making enhancement to the Identity Access Management program.Work closely with development teams to perform user management, group management and password management requests.Create and maintain Identify Access Management metrics.Document various system access for all UsersSupport efforts regarding audit findings, adherence to compliance and organizational change.Responsible for working to resolve ForgeRock system issues escalated within the service level agreement.Ability to create, and modify CONOPS, and Standard Operating Procedure documents

Basic Qualifications

BS in computer science or IT and 8+ years of experience. Add'l experience may be considered in lieu of degree.IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP)Candidate must possess an Active TS/SCI clearance and ability to obtain and maintain CI PolyExperience with federation protocols (SAML, OAUTH, OpenID) and zero trust principlesExperience with the ForgeRock platformKnowledge of Identity and Access Management platformsKnowledge of Linux Operating SystemsExcellent written and oral communication skillsAbility to work effectively with both technical and non-technical audiencesDemonstrated ability to work in a complex, fast paced environment

Preferred Qualifications

Prior experienced with DISA and DISA’s support to mission partnersTS/SCI w/CI Poly PreferredExperience with: JISG Access Controls, Amazon Web Services, Ansible playbooks

gsmo

#tn15

Original Posting Date:2024-11-07

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:Pay Range $101,400.00 - $183,300.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.