Systems Engineer (DevSecOps and ICAM) at Tetrad Digital Integrity LLC
Arlington, VA
$115,000–$125,000from the description
Jul 28, 2026
Arlington, VA
Jul 29, 2026
What this job asks for AI summary
This role supports a DISA identity platform by engineering, deploying, and sustaining an Identity-as-a-Service (IDaaS) solution built around ForgeRock and Zero Trust principles. The engineer will build and maintain CI/CD pipelines, automate identity lifecycle workflows, integrate federation protocols (SAML, OAuth2, OIDC), and administer Linux-based ICAM components in a classified government environment. It suits an experienced systems engineer with deep ICAM and DevSecOps expertise who holds an active Top Secret clearance.
Senior level · 8+ years · Washington-Arlington-Alexandria, DC-VA-MD-WV · TS/SCI clearance · Full-time
Quick apply — this platform usually takes a CV and a few fields.
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $158,337 (middle half $126,441–$180,105). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 29, 2026. It is a model, not a headcount.
Why we read it this way (6)
The role sits at the boundary between software/systems engineering (building and automating ICAM pipelines, writing configuration-as-code) and systems administration (Linux hardening, directory services, monitoring). 15-1252 was chosen because the primary deliverables are engineered, automated, and deployed software artifacts; 15-1244 is the close runner-up.
The clearance gate is stated as an active Top Secret with SCI eligibility required; a CI Poly is listed as something the candidate must be 'able to obtain and maintain,' not a current possession requirement. TS/SCI with CI Poly is listed under Preferred Qualifications as the stronger preferred posture.
The BS degree requirement explicitly accepts 'equivalent experience in lieu of degree,' so the degree requirement is set to None.
IAT Level II certification (Security+, CySA+, SSCP, or CISSP) is a hard gate; Security+ is listed as the first example and the others are captured as alternatives on the same skill.
GitLab, Jenkins, Ansible, and AWS appear only under Preferred Qualifications and are marked accordingly.
Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.