Identity / Authentication SME (Keycloak, PKI) - Part Time - TS/S

IMPORTANT: This position is 100% ON-SITE inside a SCIF. This is NOT remote work and NOT hybrid. On-site work is required and is not optional. This role is CUSTOMER-FACING, working directly with government and partner stakeholders, including at customer facilities as needed.

Employer: D9Tech Resources, LLC
Openings: 1 opening
Location: Herndon, VA (primary) or Washington, DC (preferred). Alternates: Seattle, WA or Denver, CO. Must live within commuting distance of one of these SCIF locations.
Employment type: W-2 Contract, Part Time
Hours: 20 hours per week (part time)
Period of performance: December 2026 through November 2027
Clearance: Active TS/SCI required
Pay: Competitive

Summary
D9Tech Resources, LLC is hiring in support of a national security cloud program. Part-time (20 hrs/week) subject matter expert for identity and authentication. You will lead PKI work, Keycloak federation and identity synchronization for classified systems. All work is performed on-site in a SCIF.

Responsibilities
- Lead PKI implementation for a mission system on a fixed 2027 timeline
- Support identity for external connections into the data platform
- Configure Keycloak federation and identity synchronization from enterprise identity sources
- Integrate SAML and OIDC applications
- Advise engineering teams on authentication design and troubleshooting

Required Qualifications
- Active TS/SCI clearance, eligible for SCI read-on/INDOC and SAP indoctrination where required
- Live within commuting distance of a SCIF in Herndon, VA, Washington, DC, Seattle, WA or Denver, CO
- Able and willing to work on-site in a SCIF on a regular basis, including at customer facilities
- Deep Keycloak experience
- PKI and CAC authentication experience
- SAML and OIDC expertise
- Hands-on experience with AWS cloud services
- Experience in air-gapped or classified environments with no public internet access and controlled change management (CCB)
- DoD 8140/8570 IAT Level II or higher certification (e.g., Security+, CISSP) where applicable

Preferred Qualifications
- Experience in AWS GovCloud and/or classified AWS regions (C2S/SC2S)
- AWS Certified Solutions Architect, DevOps Engineer, Advanced Networking or Security Specialty
- Experience with enterprise identity providers and directory synchronization

Reminder: On-site in a SCIF, customer-facing. Remote and hybrid candidates will not be considered.

D9Tech Resources, LLC is an Equal Opportunity Employer.