Identity & Directory Services Architect
About The Position
GDIT is seeking an Identity & Directory Services Architect to provide and manage complex, hybrid, directory services capabilities for large enterprise-wide collaboration efforts on their Defense Enterprise Office Solutions (DEOS) contract. As an Identity & Directory Services Architect, you will oversee the design, implementation, and integration of core Identity and Access Management (IdAM) services that span multiple domains and cloud service environments, enabling seamless authentication for millions of users. Directory and Authentication services will comply with all appropriate DOD instructions and guidance and be capable of providing services for numerous, modern, connectivity methodologies including mobile devices. You will provide support services to the DHA Program Management Office (PMO) directly or to DHA customers. You will provide the full range of engineering support necessary to incorporate new/future technologies into the DHA service/baseline after initial deployment and will employ expertise in both traditional IT infrastructure and cloud computing. You will provide comprehensive technical/engineering support services to include design, implementation, modification, and sustainment of DHA projects and work activities.
Requirements
- Active DoD Secret clearance
- IAT Level II DoD 8570 certification (CompTIA Security+ CE or similar)
- Microsoft Certified Solutions Expert (MCSE) Certification or relevant Enterprise IT and Directory Services Certifications
- Bachelor of Science or Arts Degree in related field
- 10+ years of Enterprise Engineering and Directory Services experience
- Experience with SailPoint, Okta, CyberArk, Ping Identity, Radiant Logic and/or ForgeRock
- Expertise delivering highly secure IdAM solutions supporting multi-tenancy and hybrid cloud infrastructures
- Expertise working with Microsoft Identity technologies including Active Directory, Azure Active Directory, and Group Policies.
- Expertise with Identity Federation (AD-FS), Attribute Based Access Control (ABAC) and DoD PKI Infrastructure models
- Expertise in developing, maintaining and contributing to technical and process documentation
- Experience with Office 365 management and configuration (Exchange, OneDrive, SharePoint, Office Suite, AzureAD)
- Expertise with Windows Server 2008-2016
- Networking experience (TCP/IP, DNS, DHCP, VOIP, SSL, VPN, network topology, firewall)
- Ability to motivate teams to perform exceptionally over long stretches of time and in challenging situations
Nice To Haves
- Prior experience as IAM or ICAM Consultant, Specialist or Engineer
- Expertise in cloud service delivery models
- Expertise in DoD Cloud Computing Security Requirements Guide (CC-SRG) and SCCA Architectures including Cloud Access Point (CAP) architectures
- Comfort with public speaking and giving presentations
- Experience working with technical leadership and senior leaders, including C-Suite executives
Responsibilities
- Oversee design, implementation and integration of core Identity and Access Management (IdAM) services that span multiple domains and cloud service environments enabling seamless authentication for millions of users.
- Ensure Directory and Authentication services comply with all appropriate DOD instructions and guidance and are capable of providing services for numerous, modern, connectivity methodologies including mobile devices.
- Provide support services to the DHA Program Management Office (PMO) directly or to DHA customers.
- Provide the full range of engineering support necessary to incorporate new/future technologies into the DHA service/baseline after initial deployment.
- Employ expertise in both traditional IT infrastructure and cloud computing.
- Provide comprehensive technical/engineering support services to include design, implementation, modification, and sustainment of DHA projects and work activities.
Benefits
- 401K with company match
- Comprehensive health and wellness packages
- Internal mobility team dedicated to helping you own your career
- Professional growth opportunities including paid education and certifications
- Cutting-edge technology you can learn from
- Rest and recharge with paid vacation and holidays
- Variety of medical plan options, some with Health Savings Accounts
- Dental plan options
- Vision plan
- 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
- Full flex work weeks where possible
- Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
- 15 days of paid leave per calendar year to be used for vacations, personal business, and illness
- 10 paid holidays per year
- Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees.
- Short and long-term disability benefits
- Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
