The Role
Design, deploy, secure, and sustain ForgeRock/Ping Identity-based IDaaS and ICAM solutions using DevSecOps, CI/CD, configuration-as-code, and automated provisioning. Support SSO, SAML/OAuth2/OIDC, federation, Zero Trust integrations, compliance (DoD/DISA/RMF), hardening, monitoring, troubleshooting, and operational documentation to meet ATOs and SLAs.
Summary Generated by Built In
GCyber is seeking a Systems Engineer (DevSecOps and ICAM) to help support our government customer. The Systems Engineer will contribute to the engineering, deployment, automation, and sustainment of an Identity-as-a-Service (IDaaS) platform that underpins CESO’s Zero-trust Architecture and cross-domain capabilities. The engineer will work hands-on with Ping Identity components, enterprise directory services, automated pipeline, and large-scale ICAM integration patterns across secure environments.
As the Systems Engineer (DevSecOps and ICAM), you will:
As the Systems Engineer (DevSecOps and ICAM), you will:
- Engineer, deploy, integrate, secure, and maintain ForgeRock IdP/ICAM solutions in complex, mission-critical environments using DevSecOps practices, CI/CD pipelines, configuration-as-code, and automated provisioning.
- Design and implement enterprise identity services, including SSO, SAML, OAuth2, OIDC, identity federation, Zero Trust integration, API-based connectors, and automated identity lifecycle workflows.
- Collaborate with cybersecurity, development, and infrastructure teams to deliver secure ICAM architectures aligned with DoD, DISA, RMF, and enterprise security standards, supporting ATOs, audits, and compliance initiatives.
- Perform system hardening, monitoring, performance tuning, troubleshooting, and root-cause analysis for Linux-based ForgeRock components while ensuring service availability and SLA compliance.
- Develop engineering documentation, technical diagrams, SOPs, CONOPS, performance dashboards, and operational metrics to support continuous improvement and enterprise ICAM operations.
- Active DoD Top Secret clearance with SCI eligibility
- Candidate must be willing to take and maintain a CI Poly and Special Program Access.
- BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree.)
- IAT II Certification (e.g. Security+, CySA+, GICSP, GSEC, SSCP)
- Hands-on experience with federation technologies (SAML, OAuth@, OpenID Connect) and Zero-Trust identity principles.
- Experience engineering or administering the ForgeRock platform (AM, IDM, DS)
- Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
- Experience with Windows and Linux systems administration, shell scripting, system tuning, and troubleshooting
- Ability to work across highly technical and non-technical teams in a fast-paced environment.
- Experience with any of the following preferred:
- JISG Access Controls
- AWS cloud engineering, IAM, and security services
- Ansible playbooks and automated configuration management
- CI/CD pipeline (GitLab, Jenkins, etc.)
- API gateway, identity orchestration, or cross-domain service integrations patterns.
Skills Required
- Active DoD Top Secret clearance with SCI eligibility
- Willingness to take and maintain a CI Polygraph and Special Program Access
- BS in Computer Science, IT, or related discipline or equivalent experience; 8+ years systems engineering experience
- IAT II level certification (e.g., Security+, CySA+, GICSP, GSEC, SSCP)
- Hands-on experience with federation technologies (SAML, OAuth2, OpenID Connect) and Zero Trust identity principles
- Experience engineering or administering the ForgeRock platform (AM, IDM, DS)
- Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls
- Experience with Windows and Linux systems administration, shell scripting, system tuning, and troubleshooting
- Ability to work across technical and non-technical teams in fast-paced environments
- JISG Access Controls
- AWS cloud engineering, IAM, and security services
- Ansible playbooks and automated configuration management
- CI/CD pipeline experience (GitLab, Jenkins, etc.)
- API gateway, identity orchestration, or cross-domain service integration patterns
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
GCyber was founded to create innovative information technology solutions for the federal, state, and commercial markets. GCyber engineers have provided professional services supporting the information technology industry for over 15 years. Along with our engineering staff, we have relationships with partners, vendors, and analysts who have specialized expertise in the federal market. GCyber’s broad experience, focus toward execution with measurable results, and commitment to innovation provide responsive and long-lasting solutions to our customers. It is the mission of GCyber to always remain focused on our customer’s goals and improving their existing landscape. Our company accomplishes this by focusing on opportunities for innovation, while remaining mindful of industry successes and failures in the deployment of technologies. If your road map needs increasingly innovative solutions, GCyber can help you get there.
