# Systems Engineer (DevSecOps and ICAM)

**Company**: Leidos
**Location**: Arlington, VA
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $107,900.00 - $195,050.00
**Category**: Engineering
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Arlington-VA/Systems-Engineer--DevSecOps-and-ICAM-_R-00194935?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_2453e77d-ba3

## Description

Leidos' Digital Modernization sector is seeking a Systems Engineer with strong DevSecOps, identity security, and systems-integration expertise to support the Defense Information Systems Agency (DISA) Compartmented Enterprise Services Office (CESO).

The engineer will contribute to the engineering, deployment, automation, and sustainment of an Identity-as-a-Service (IDaaS) platform that underpins CESO's Zero-Trust Architecture and cross-domain capabilities.

The engineer will work hands-on with Ping Identity components, enterprise directory services, automated pipelines, and large-scale ICAM integration patterns across secure environments.

This position is 100% on-site in Arlington, VA.

### Primary Responsibilities:

- Engineer, deploy, integrate, secure, and maintain ForgeRock IdP/ICAM components within complex, mission-critical environments.

- Apply DevSecOps practices,including CI/CD pipelines, automated provisioning, configuration-as-code, and repeatable deployment patterns,to ICAM services.

- Integrate ICAM services with enterprise directory architecture, federation services, Zero Trust controls, and cross-domain workflows.

- Implement and maintain access management functions including SSO, identity federation (SAML, OAuth2, OIDC), authentication flows, and policy enforcement.

- Collaborate with cybersecurity, development, and infrastructure teams to design secure identity solutions aligned with DoD and DISA standards.

- Conduct system hardening, monitoring, log analysis, and performance tuning across Linux-based ICAM components.

- Perform systems integration tasks such as API-based connectors, service integrations, and automated provisioning/deprovisioning workflows.

- Support architectural reviews, internal control assessments, and risk management activities related to ICAM operations.

- Diagnose and resolve escalated ForgeRock/ICAM issues within defined SLAs, including root-cause analysis and corrective action development.

- Create, maintain, and version-control engineering documentation including CONOPS, SOPs, API interface documentation, and workflow diagrams.

- Provide input to audits, ATO support, compliance adherence, and continuous improvement initiatives.

- Develop and maintain ICAM performance metrics, identity lifecycle reports, and engineering dashboards.

- Partner with development teams to automate user, group, and credential workflows across secure enclaves.

### Basic Quals:

- BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree).

- Active TS clearance with SCI eligibility

- Ability to obtain and maintain a CI Poly and Special Program Access.

- IAT Level II certification or higher (e.g., Security+ CE, CySA+, SSCP, CISSP).

- Hands-on experience with federation technologies (SAML, OAuth2, OpenID Connect) and Zero-Trust identity principles.

- Experience engineering or administering the ForgeRock platform (AM, IDM, DS).

- Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.

- Experience with Windows and Linux systems administration, shell scripting, system tuning, and troubleshooting.

- Ability to work across highly technical and non-technical teams in a fast-paced environment.

- Strong communication skills and the ability to translate complex identity/security concepts to diverse audiences.

### Preferred Quals:

- Experience supporting DISA or DoD mission partners.

- Active TS/SCI with CI Poly preferred.

- Experience with any of the following:

– JISG Access Controls   – AWS cloud engineering, IAM, and security services   – Ansible playbooks and automated configuration management   – CI/CD pipelines (GitLab, Jenkins, etc.)   – API gateway, identity orchestration, or cross-domain service integration patterns

## Skills

### Required
- DevSecOps
- Identity Security
- Systems Integration
- ForgeRock
- Ping Identity
- Zero-Trust Architecture
- ICAM
- Linux
- Windows
- Federation Technologies
- SAML
- OAuth2
- OpenID Connect

### Nice to have
- JISG Access Controls
- AWS Cloud Engineering
- Ansible Playbooks
- CI/CD Pipelines
- API Gateway
- Identity Orchestration
- Cross-Domain Service Integration Patterns

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Arlington-VA/Systems-Engineer--DevSecOps-and-ICAM-_R-00194935?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)