Zero Trust ICAM & PKI SME

General Dynamics
United States
Workplace: OnsiteFull timeUSD 129,813 - 172,500 annuallyFunction: CybersecurityExperience: 10+ yearsEducation: bachelorsSkills: ["Troubleshooting","Documentation","Compliance","Cross-team collaboration","Process automation"]

Lead engineering, deployment, and operational integration of identity, credentialing, and access control solutions to support infrastructure security for USCENTCOM. Own ICAM pillars across identity lifecycle, credentialing/PKI (CAs, HSMs, CLM, mTLS, smart-card MFA), and access governance (RBAC/ABAC/PBAC/IBAC, PAM, IGA). Perform vulnerability scanning, STIG remediation, patching, and produce compliance reporting while supporting complex federation and SSO integrations.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
General Dynamics
General Dynamics
4 days ago

Zero Trust ICAM & PKI SME

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 9 hours agoStatus: Live

Job Summary

Lead engineering, deployment, and operational integration of identity, credentialing, and access control solutions to support infrastructure security for USCENTCOM. Own ICAM pillars across identity lifecycle, credentialing/PKI (CAs, HSMs, CLM, mTLS, smart-card MFA), and access governance (RBAC/ABAC/PBAC/IBAC, PAM, IGA). Perform vulnerability scanning, STIG remediation, patching, and produce compliance reporting while supporting complex federation and SSO integrations.
Location: United States
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Support infrastructure security on the CITS contract for USCENTCOM by leading identity-centric credentialing and access control solution integration aligned with DoD Zero Trust principles.
  • •Design, implement, and maintain enterprise identity management solutions, including DISA’s enterprise identity approach, identity lifecycle workflows, directory services, and identity synchronization troubleshooting.
  • •Design and operate enterprise PKI solutions aligned with DoD/NSS standards, including configuring CAs/RAs/OCSP and HSMs, and implementing certificate lifecycle automation and disaster recovery/key recovery plans.
  • •Configure and optimize fine-grained access control models and lead PAM/IGA operations (including just-in-time access and access certifications/SoD) while troubleshooting federation and SSO integrations.
  • •Perform maintenance activities such as vulnerability scanning, STIG remediation, and patching; ensure compliance with DoD ICAM policies and FIPS benchmarks; produce audit metrics and runbooks; coordinate escalations with third-party vendors.
Travel: Low travel

Pay and Benefits

Salary: USD 129,813 - 172,500 annually
Perks:Health InsuranceDentalVision401kPaid LeaveParental Leave

Key Requirements

  • •Active Secret clearance and ability to obtain Top Secret/SCI.
  • •U.S. Citizenship required.
  • •10+ years of related engineering/operations experience in enterprise IT and cybersecurity.
  • •Bachelor’s degree in a related discipline (or 6 years of relevant military/real-world experience).
  • •DoD 8140/8570 IAT Level II/III or IAM Level II/III certification (e.g., Security+ CE, CASP+, CISSP) plus relevant identity/access credentials.
Experience:10+ yearsEnterprise ITCybersecurityIdentity and access managementPKI
Education:Bachelor's in Cybersecurity or Information Assurance (concentration preferred)
Skills:TroubleshootingDocumentationComplianceCross-team collaborationProcess automation
Certifications:DoD 8140 IAT Level IIDoD 8570 IAT Level IIDoD 8140 IAT Level IIIDoD 8570 IAT Level IIIIAM Level IIIAM Level IIISecurity+ CECASP+CISSPCIAMCIGECIMPMicrosoft Certified: Identity and Access Administrator AssociateOkta Certified ProfessionalITIL 4 FoundationMicrosoft Windows Hybrid Administrator
Tech Stack:Identity ManagementActive DirectoryLDAPMaster User Records (MUR)Automated Account Provisioning (AAP)Certificate Lifecycle Management (CLM)X.509Certificate Revocation Lists (CRLs)Online Certificate Status Protocol (OCSP)SCEPESTACMENon-Person Entities (NPE)CAC/PIVHardware tokensHSMMicrosoft AD CSKeyfactorThalesSafeNet

Eligibility

Nationality:US National
Security Clearance:SecretTop Secret/SCI

Company Brief

General Dynamics
Provides IT, systems engineering, cybersecurity, cloud, and mission support services to U.S. federal civilian and defense agencies, delivering large-scale technology solutions and managed services for national security and government operations.
Industry: Defense Technology
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: Tysons / Fairfax, United States
WebsiteLinkedIn