Application Identity Engineer

Location: Stuttgart, Germany
Security Clearance: Secret
Job Type: Full-Time

Target Salary Range*:$160,000 - 210,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Application Integration Engineer / ServiceNow Integration Engineer will support wave-based application onboarding into the E-ICAM enforcement architecture while ensuring ServiceNow CMDB is used as a key operational data source for application, mission, identity, ownership, classification, and access policy relationships.

Key Responsibilities

• Support application discovery, integration planning, and onboarding wave execution.
• Analyze application authentication methods, identity sources, federation capability, authorization model, dependencies, logging, and access paths.
• Configure and validate application integration patterns, including federation, reverse proxy, header injection, API gateway, brokered access, and controlled legacy access.
• Coordinate with F5 / Identity Integration Engineers to implement application-specific access policies and authentication flows.
• Use ServiceNow CMDB as the authoritative data source for application-to-mission, application-to-owner, application-to-identity provider, application-to-classification, and application-to-access policy mapping.
• Support ServiceNow workflow integration for application intake, readiness scoring, approval routing, onboarding status, testing, user acceptance, exception tracking, and sustainment handoff.
• Validate application onboarding outcomes, including authentication, authorization, logging, no-bypass enforcement, user acceptance, and CMDB updates.
• Identify unsupported or non-compliant applications and support decision paths for remediation, brokered access, isolation, risk acceptance, or replacement recommendation.

Qualifications

• Must have an Active Secret Clearance
• Relevant bachelors + 8 years of experience
• Must have security+ or DOD 8570 relevant certification
• Experience integrating enterprise applications with Identity and Access Management (IAM/ICAM) solutions
• Knowledge of authentication protocols, federation technologies, authorization models, and identity provider integrations
• Understanding of reverse proxies, API gateways, brokered access solutions, and enterprise access management architectures
• Experience troubleshooting application onboarding, authentication, and authorization issues across complex environments
• Ability to coordinate with cross-functional engineering, security, and application stakeholder teams
• Strong documentation, validation, and technical analysis skills supporting enterprise integration programs

Preferred Qualifications

• Experience with ServiceNow CMDB administration, application mapping, and workflow integration
• Ability to be on-site in Germany within 3-weeks