Systems Developer Advanced - ID Engineering S

The Identity Engineer provides technical expertise to design, implement, and sustain enterprise identity and access management (IdAM) solutions in support of the DHA Domain and Directory Services Branch (DDSB). This role ensures secure, reliable, and scalable identity services that enable compliance with DoD ICAM Strategy, Zero Trust principles, and enterprise interoperability requirements. The Identity Engineer strengthens DHA’s enterprise cybersecurity posture and interoperability by providing secure, modern identity services. By enabling reliable authentication, access control, and integration with enterprise and cloud environments, this role supports the DHA’s mission to deliver secure, trusted healthcare IT services across the Military Health System.

Key Responsibilities:

Engineer, deploy, and sustain identity management services, including Active Directory Domain Services (AD DS), Entra ID (Azure AD), Active Directory Federation Services (AD FS), and Microsoft Identity Manager.

Support federation, authentication, and authorization protocols (e.g., SAML, OAuth, Kerberos, OpenID Connect) across DHA enterprise environments.

Implement and maintain Public Key Infrastructure (PKI) and Public Key Enablement (PKE) capabilities, ensuring compliance with DoDI 8520.02 and enterprise security policies.

Integrate identity services with enterprise IT platforms, including MED365, mJAD, MECM, Intune, and SaaS offerings, to enforce Zero Trust policies and access governance.

Conduct identity lifecycle management, including provisioning, de-provisioning, and attribute synchronization for users and non-person entities.