Ignite IT

Modernizes software and IT for federal agencies

Senior Identity Engineer

System AdministrationConfirmed live in the last 24 hours

Full-timeSuitland-Silver Hill, MD, USANo salary listed

About the Job

Requirements

At least 7 years of experience in identity management, directory services, systems engineering, or a closely related technical field.
At least 3 years of hands-on experience with OpenText/NetIQ eDirectory and Identity Manager in enterprise environments.
Demonstrated experience administering production eDirectory environments, including partitions, replicas, schema, auxiliary classes, LDAP server objects, and directory health.
Hands-on experience configuring, supporting, and troubleshooting NetIQ Identity Manager drivers, driver sets, DirXML policies, filters, associations, and provisioning workflows.
Experience with Identity Manager Designer, iManager, iMonitor, and related administration and troubleshooting tools.
Knowledge of LDAP and LDAPS, including binds, search filters, directory schema, and troubleshooting using ldapsearch and ldapmodify.
Experience administering Linux environments, particularly Red Hat Enterprise Linux, including shell operations, service management, permissions, logs, SSH, and SCP.
Experience managing eDirectory certificates, SSL/TLS, certificate chains, keystores, CSRs, PKCS#12, and OpenSSL.
Experience integrating identity management platforms with Microsoft Active Directory, including accounts, groups, Kerberos authentication, lockout investigations, and certificate mapping.
Ability to develop and maintain automation using Bash and Python, with working knowledge of SQL.
Experience troubleshooting complex production issues involving identity synchronization, authentication, provisioning, and directory services.
Experience with formal change management, technical documentation, and architecture or data-flow diagrams.
Ability to complete the background investigation and onboarding requirements for a U.S. Census Bureau contractor position, including Title 13 Special Sworn Status if required.
Strong communication, problem-solving, and troubleshooting skills.
Applicants must be U.S. citizens.
Applicants selected must be able to obtain and maintain a federal government clearance.

Responsibilities

Administer, maintain, and troubleshoot enterprise OpenText/NetIQ eDirectory environments across production, development, and testing systems.
Manage eDirectory partitions, replicas, schema, auxiliary classes, LDAP server objects, and directory synchronization.
Monitor directory health, investigate replication issues, and resolve authentication, connectivity, and performance problems.
Use iManager, iMonitor, Identity Console, and eDirectory command-line utilities for administration and troubleshooting.
Support eDirectory upgrades, migrations, and system maintenance, including testing, validation, and production implementation.
Configure, maintain, and troubleshoot OpenText/NetIQ Identity Manager drivers, driver sets, and provisioning workflows.
Develop and modify DirXML Script policies, driver filters, associations, and attribute transformations.
Support identity synchronization between HR systems, Active Directory, LDAP directories, databases, and enterprise applications.
Troubleshoot provisioning and deprovisioning failures, identity data inconsistencies, account synchronization issues, and driver errors.
Use Identity Manager Designer, driver traces, and diagnostic tools to identify and resolve integration issues.
Support Identity Manager upgrades and configuration changes across development, testing, and production environments.
Manage eDirectory certificates, key material objects, LDAP server certificates, and application keystores.
Configure and troubleshoot LDAP over SSL/TLS (LDAPS), certificate chains, and authentication failures.
Support certificate renewals, Certificate Signing Requests (CSRs), PKCS#12 files, and certificate management using OpenSSL.
Troubleshoot TLS handshake failures and certificate-related application connectivity issues.
Investigate account lockouts, authentication failures, missing accounts, and identity synchronization issues.
Support Active Directory integrations, including account and group management, Kerberos authentication, and certificate-based authentication.
Administer and troubleshoot eDirectory and Identity Manager services running on Red Hat Enterprise Linux.
Perform command-line troubleshooting, service management, log analysis, configuration updates, and system maintenance.
Develop and maintain scripts using Bash and Python, with working knowledge of SQL, to automate recurring operational tasks.
Support infrastructure upgrades, configuration management, and system troubleshooting.
Investigate and resolve production incidents, service requests, and complex directory-related issues.
Prepare and execute changes through formal change management processes, including Change Advisory Board (CAB) review and post-change validation.
Develop and maintain technical documentation, architecture diagrams, data-flow diagrams, operational procedures, and troubleshooting runbooks.
Collaborate with infrastructure, cybersecurity, application, and engineering teams to support system reliability and identity integrations.
Contribute to modernization initiatives involving Okta, Terraform, AWS GovCloud, and containerized directory services.

Desired Qualifications

Experience with OpenText/NetIQ Identity Manager upgrades, migrations, and version transitions.
Experience administering Okta or integrating Okta with on-premises identity systems.
Experience with AWS, particularly AWS GovCloud, EC2, EBS, S3, and DynamoDB.
Experience using Terraform, including the Okta provider and Git-based configuration management workflows.
Familiarity with container technologies such as Podman or Docker.
Experience with NetIQ Access Manager, SAML federation, or related identity and access management technologies.
Experience troubleshooting enterprise load balancers, including F5.
Familiarity with Oracle Internet Directory and JDBC-based identity integrations.
Experience with security monitoring and log analysis tools such as Microsoft Sentinel, Azure Data Explorer, Splunk, or KQL.
Familiarity with Personal Identity Verification (PIV), Common Access Card (CAC), and federal change management processes.
Previous experience supporting federal government systems or other highly regulated enterprise environments.

Senior Identity Engineer

Ignite IT · Suitland-Silver Hill, United States (Hybrid) · Full-time · Posted 2026-10-16

Workplace: hybrid

Department: OCISS

Description

Ignite IT is seeking an experienced Senior Identity and Access Management (IAM) Engineer to support enterprise identity and directory services for the U.S. Census Bureau.

This is a hands-on engineering position focused on administering, maintaining, troubleshooting, and upgrading NetIQ OpenText (formerly NetIQ/Novell) eDirectory and Identity Manager (IDM) environments running on Red Hat Enterprise Linux (RHEL).

The ideal candidate will have extensive experience supporting production eDirectory environments, configuring and troubleshooting Identity Manager drivers, managing LDAP integrations and digital certificates, and resolving complex identity provisioning and authentication issues.

The engineer will also support ongoing modernization initiatives involving Okta, AWS GovCloud, and Terraform. However, direct hands-on experience with eDirectory and Identity Manager is required, as these technologies represent the primary responsibilities of the position.

Key Responsibilities:

eDirectory Administration and Support

Administer, maintain, and troubleshoot enterprise OpenText/NetIQ eDirectory environments across production, development, and testing systems.
Manage eDirectory partitions, replicas, schema, auxiliary classes, LDAP server objects, and directory synchronization.
Monitor directory health, investigate replication issues, and resolve authentication, connectivity, and performance problems.
Utilize iManager, iMonitor, Identity Console, and eDirectory command-line utilities for administration and troubleshooting.
Support eDirectory upgrades, migrations, and system maintenance, including testing, validation, and production implementation.

Identity Manager Engineering

Configure, maintain, and troubleshoot OpenText/NetIQ Identity Manager drivers, driver sets, and provisioning workflows.
Develop and modify DirXML Script policies, driver filters, associations, and attribute transformations.
Support identity synchronization between HR systems, Active Directory, LDAP directories, databases, and enterprise applications.
Troubleshoot provisioning and deprovisioning failures, identity data inconsistencies, account synchronization issues, and driver errors.
Use Identity Manager Designer, driver traces, and diagnostic tools to identify and resolve integration issues.
Support Identity Manager upgrades and configuration changes across development, testing, and production environments.

Security, Certificates, and Authentication

Manage eDirectory certificates, key material objects, LDAP server certificates, and application keystores.
Configure and troubleshoot LDAP over SSL/TLS (LDAPS), certificate chains, and authentication failures.
Support certificate renewals, Certificate Signing Requests (CSRs), PKCS#12 files, and certificate management using OpenSSL.
Troubleshoot TLS handshake failures and certificate-related application connectivity issues.
Investigate account lockouts, authentication failures, missing accounts, and identity synchronization issues.
Support Active Directory integrations, including account and group management, Kerberos authentication, and certificate-based authentication.

Linux Administration and Automation

Administer and troubleshoot eDirectory and Identity Manager services running on Red Hat Enterprise Linux.
Perform command-line troubleshooting, service management, log analysis, configuration updates, and system maintenance.
Develop and maintain scripts using Bash and Python, with working knowledge of SQL, to automate recurring operational tasks.
Support infrastructure upgrades, configuration management, and system troubleshooting.

Production Support and Modernization

Investigate and resolve production incidents, service requests, and complex directory-related issues.
Prepare and execute changes through formal change management processes, including Change Advisory Board (CAB) review and post-change validation.
Develop and maintain technical documentation, architecture diagrams, data-flow diagrams, operational procedures, and troubleshooting runbooks.
Collaborate with infrastructure, cybersecurity, application, and engineering teams to support system reliability and identity integrations.
Contribute to modernization initiatives involving Okta, Terraform, AWS GovCloud, and containerized directory services.

Requirements

7+ years of experience in identity management, directory services, systems engineering, or a closely related technical field.
3+ years of hands-on experience with OpenText/NetIQ eDirectory and Identity Manager in enterprise environments.
Demonstrated experience administering production eDirectory environments, including partitions, replicas, schema, auxiliary classes, LDAP server objects, and directory health.
Strong hands-on experience configuring, supporting, and troubleshooting NetIQ Identity Manager drivers, driver sets, DirXML policies, filters, associations, and provisioning workflows.
Experience with Identity Manager Designer, iManager, iMonitor, and related administration and troubleshooting tools.
Strong knowledge of LDAP and LDAPS, including binds, search filters, directory schema, and troubleshooting using ldapsearch and ldapmodify.
Experience administering Linux environments, particularly Red Hat Enterprise Linux, including shell operations, service management, permissions, logs, SSH, and SCP.
Experience managing eDirectory certificates, SSL/TLS, certificate chains, keystores, CSRs, PKCS#12, and OpenSSL.
Experience integrating identity management platforms with Microsoft Active Directory, including accounts, groups, Kerberos authentication, lockout investigations, and certificate mapping.
Ability to develop and maintain automation using Bash and Python, with working knowledge of SQL.
Experience troubleshooting complex production issues involving identity synchronization, authentication, provisioning, and directory services.
Experience with formal change management, technical documentation, and architecture or data-flow diagrams.
Strong communication, problem-solving, and troubleshooting skills.
Ability to complete the background investigation and onboarding requirements for a U.S. Census Bureau contractor position, including Title 13 Special Sworn Status if required.

Preferred Qualifications

Experience with OpenText/NetIQ Identity Manager upgrades, migrations, and version transitions.
Experience administering Okta or integrating Okta with on-premises identity systems.
Experience with AWS, particularly AWS GovCloud, EC2, EBS, S3, and DynamoDB.
Experience using Terraform, including the Okta provider and Git-based configuration management workflows.
Familiarity with container technologies such as Podman or Docker.
Experience with NetIQ Access Manager, SAML federation, or related identity and access management technologies.
Experience troubleshooting enterprise load balancers, including F5.
Familiarity with Oracle Internet Directory and JDBC-based identity integrations.
Experience with security monitoring and log analysis tools such as Microsoft Sentinel, Azure Data Explorer, Splunk, or KQL.
Familiarity with Personal Identity Verification (PIV), Common Access Card (CAC), and federal change management processes.
Previous experience supporting federal government systems or other highly regulated enterprise environments.

Benefits

401(k) with matching and 100% Vested
Health Insurance - 3 plans to select from
Dental insurance
Vision Insurance
Health savings account
Life insurance
Short Term Disability
Long Term Disability
AD&D
Paid time off
Professional development assistance
Training
Tuition reimbursement
Flexible schedule
Flexible spending account
Referral program
Paid Legal Plan
and more....

Ignite IT is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, Veteran status, sexual orientation, or other protected characteristic. In accordance with EO 13665 Final Rule, Ignite IT will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

Applicants selected must be able to obtain and maintain a federal government clearance.

US CITIZENSHIP REQUIRED

Apply

Apply at Ignite IT

About the Company

Ignite IT

Modernizes software and IT for federal agencies

Ignite IT designs and modernizes software systems for U.S. federal agencies and private-sector organizations. Its consulting and engineering teams help clients replace older applications, move workloads into the cloud and automate business processes while keeping existing systems running. Work spans public services such as patent filing and federal court case management, with projects combining custom software development, data workflows and support for the people who use those systems. The company earns its business through technology delivery and advisory engagements, working directly with customers and alongside partners. Founded in 2018, Ignite IT is headquartered in Ashburn, Virginia.

Company size: 501-1,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Ashburn, VA
Founded: 2018

Recently Posted Jobs

Explore more opportunities at Ignite IT

See more jobs