Systems Engineer

Sr. Systems Engineer JD-

SYSTEMS ENGINEER: (DLA ICAM Engineer, OIM Engineer) x16

· The Systems Engineer role will be highly hands-on, assessing each application's current authentication, identity structure, technical dependencies, and appropriate ICAM integration pattern. The work includes inventorying applications, categorizing them, and creating migration runbooks.

· Role is expected to be very hands-on.

· Limited opportunity for support-only or supervisory candidates because of the compressed timeline and technical complexity.

· Primary responsibilities:

o Work directly with application teams.

o Assess applications from an ICAM/identity perspective.

o Understand existing authentication methods.

o Understand the application's identity structure.

o Determine the appropriate ICAM integration pattern.

o Support application onboarding/integration.

o Troubleshoot authentication and integration issues.

· Approximately 400+ applications are currently associated with the existing identity management environment.

· Complete inventory of applications and complexity is still being developed.

· Engineer will help assess and categorize applications and develop migration approaches/runbooks.

· This is both an assessment and implementation/integration role.

· Technical Background:

o Strong identity fundamentals are important.

o SAML is a top-priority skill.

o Experience with:

§ SAML

§ OIDC

§ OAuth

§ SSO

§ Authentication troubleshooting

§ Attributes/groups

§ API connectors

§ Application integration

§ Testing/support

· Current environment involves migration from a DLA system toward a DISA environment.

· Okta is the anticipated end-state platform, although some legacy applications may not be capable of being migrated to Okta.

· Oracle Identity Manager (OIM) experience is useful but not necessarily an absolute requirement if the candidate has strong transferable identity/IAM skills.

· Strong tool-agnostic IAM fundamentals can be considered.

· Ideal Candidate Profile:

o Someone who can effectively say:

o "I've onboarded applications to an SSO platform.”

o "I've worked with SAML/OIDC.”

o "I've diagnosed authentication failures.”

o "I've worked with attributes and groups.”

o "I've worked with API connectors.”

o "I've supported integration testing.”

· Hands-on identity engineering experience is more important than simply having experience with a particular tool.

· FULLY REMOTE - might need to travel to Fort Belvoir, VA occasionally but not frequent and client will cover travel

· DLA JETS Legacy AMPS (Account Management and Provisioning System) program - new MOD for expansion

· Secret clearance and IAT Level II cert REQUIRED

DLA JETS Legacy AMPS (Account Management and Provisioning System) Program

Enterprise Identity & Access Management (IDAM) Modernization Program Summary:

· Our client is launching a large-scale Identity & Access Management (IDAM) modernization effort involving the migration and integration of 124 applications into a new enterprise environment. This is a unique initiative with a compressed timeline, requiring all positions to be onboarded and operational by October 1st.

· The program will support the transition from an existing DLA identity management platform to a DISA-managed environment, requiring extensive application assessments, authentication modernization, and integration planning. Team members will play a hands-on role in evaluating current application architectures, determining migration strategies, and implementing identity and access solutions.

Key Responsibilities:

· Conduct assessments of applications currently supported within the IDAM environment

· Collaborate with application owners to inventory and evaluate existing authentication structures

· Define and implement appropriate identity integration patterns

· Support workflow integration and migration activities

· Develop specifications, checklists, and migration approaches for various application categories

· Support SAML-based integrations and migration efforts into Okta

· Configure and manage attributes, roles, and group structures

· Provide hands-on engineering support throughout implementation and transition activities

· Contribute to strategic architecture and design decisions for the future environment

Technical Environment:

· Migration of approximately 400 applications currently managed within the legacy IDAM platform

· Transition from DLA systems to DISA systems

· SAML authentication and Okta integration

· Identity governance, access management, and application onboarding

· Hands-on engineering and implementation focus

Team Structure:

· Personnel will work in highly structured teams of eight

· Collaborative delivery model focused on execution, assessment, migration, and integration outcomes

Program Highlights:

· Large-scale enterprise modernization initiative

· 124 applications targeted for implementation/migration

· 64 immediate hiring opportunities

· Highly technical, hands-on engineering work

· Opportunity to support a critical DLA-to-DISA transition

· Fast-paced environment with significant impact and visibility