Systems Engineer (DevSecOps and ICAM)

• Engineer, deploy, integrate, secure, and maintain ForgeRock IdP/ICAM solutions in complex, mission-critical environments using DevSecOps practices, CI/CD pipelines, configuration-as-code, and automated provisioning.
• Design and implement enterprise identity services, including SSO, SAML, OAuth2, OIDC, identity federation, Zero Trust integration, API-based connectors, and automated identity lifecycle workflows.
• Collaborate with cybersecurity, development, and infrastructure teams to deliver secure ICAM architectures aligned with DoD, DISA, RMF, and enterprise security standards, supporting ATOs, audits, and compliance initiatives.
• Perform system hardening, monitoring, performance tuning, troubleshooting, and root-cause analysis for Linux-based ForgeRock components while ensuring service availability and SLA compliance.
• Develop engineering documentation, technical diagrams, SOPs, CONOPS, performance dashboards, and operational metrics to support continuous improvement and enterprise ICAM operations.

• Active DoD Top Secret clearance with SCI eligibility
• Candidate must be willing to take and maintain a CI Poly and Special Program Access.
• BS in Computer Science, IT, or related discipline and 8+ years of systems engineering experience (or equivalent experience in lieu of degree.)
• IAT II Certification (e.g. Security+, CySA+, GICSP, GSEC, SSCP)
• Hands-on experience with federation technologies (SAML, OAuth@, OpenID Connect) and Zero-Trust identity principles.
• Experience engineering or administering the ForgeRock platform (AM, IDM, DS)
• Strong understanding of ICAM concepts, identity lifecycle management, and enterprise access controls.
• Experience with Windows and Linux systems administration, shell scripting, system tuning, and troubleshooting
• Ability to work across highly technical and non-technical teams in a fast-paced environment.
• Experience with any of the following preferred:
  • JISG Access Controls
  • AWS cloud engineering, IAM, and security services
  • Ansible playbooks and automated configuration management
  • CI/CD pipeline (GitLab, Jenkins, etc.)
  • API gateway, identity orchestration, or cross-domain service integrations patterns.

Our Benefits

GCyber is committed to the well-being and development of every employee. Our benefits are designed to support your personal and professional goals, from health and wellness programs to retirement savings and career development opportunities. Highlights include:

• 26 Days of Paid Leave + Annual PTO Increase
• An extra day of paid leave for every year of employment with GCyber
• Paid Parental Leave
• Additional Leave Allowances for Military Duty, Jury Duty, and Bereavement Leave
• 401(k) Matching
• 100% Company-funded Disability Insurance
• 90% Company-Funded Health, Dental, and Vision Insurance, with contributions to insurance benefits for spouses, children, and family members
• Training and Professional Development Plans
• Commuter Benefits Plan
• Parking and Transportation Allowance

Equal Opportunity Employer

GCyber is an Equal Opportunity Employer. This means you don't have to worry about whether your application process will be fair. We consider all applicants without regard to race, color, religion, age, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, veteran status, or disability.

Stay in Touch

For future job notifications please follow GCyber on LinkedIn. https://linkedin.com/company/gcyber