Senior ICAM Integration Specialist (REMOTE)

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Senior ICAM Integration Specialist with a Secret Security clearance to support KITS and our government customer. The position is remote.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced Senior ICAM Integration Specialist - Enablement to join a team supporting Identity, Credential, and Access Management (ICAM) solutions for our government customers. The ideal candidate is a highly skilled and technically authoritative professional with extensive expertise in designing, implementing, and leading the integration of enterprise applications and systems with ICAM platforms, particularly Okta and SailPoint, within a federal government environment. This individual will serve as a senior technical resource and team leader for application onboarding, SSO enablement, identity governance integration, and lifecycle management automation, driving the strategic development and execution of integration initiatives that support mission objectives and federal ICAM mandates.

The Senior ICAM Integration Specialist - Enablement will serve as a senior technical leader responsible for architecting, implementing, and overseeing the integration of enterprise applications, systems, and identity sources with Okta and SailPoint ICAM platforms in a federal government environment. This individual will provide authoritative technical guidance, lead complex integration initiatives, and mentor junior integration specialists, working closely with ICAM architects, engineers, security personnel, program managers, and government stakeholders to deliver secure, scalable, and operationally excellent integration solutions.

Principal responsibilities will include but are not limited to:

• Lead the design, implementation, and oversight of enterprise application and service onboarding to Okta and SailPoint platforms, including the configuration of SSO integrations, provisioning connectors, access governance policies, and lifecycle management workflows.
• Serve as a senior technical authority and subject matter expert on ICAM integration patterns, standards, and best practices, providing guidance to integration teams, application owners, and government stakeholders throughout the onboarding lifecycle.
• Architect and implement complex Single Sign-On (SSO) integrations between Okta and enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and other supported federation protocols, including non-standard and custom integration scenarios.
• Lead the development of advanced SailPoint provisioning connectors, integration modules, and custom rules to enable automated identity lifecycle management for complex and non-standard application integrations.
• Collaborate with ICAM architects, application owners, development teams, and security personnel to define integration requirements, develop integration strategies, and deliver comprehensive integration designs and implementation plans.
• Drive the development, maintenance, and enforcement of application onboarding standards, integration patterns, reusable integration templates, and best practices to ensure consistency, quality, and security across the ICAM integration portfolio.
• Lead the configuration and optimization of Okta Lifecycle Management policies, Okta Workflows, and SailPoint provisioning workflows to automate and enhance identity-related processes and event-driven integration scenarios at enterprise scale.
• Oversee and perform advanced troubleshooting and root cause analysis for complex integration issues across Okta and SailPoint environments, developing and implementing solutions that address systemic challenges and prevent recurrence.
• Lead integration testing activities, including the development of test plans, test cases, and testing frameworks for functional testing, regression testing, and user acceptance testing (UAT) of ICAM integrations.
• Mentor and provide technical guidance to junior and mid-level ICAM integration specialists, conducting code and configuration reviews, sharing knowledge, and fostering the professional development of team members.
• Develop and maintain authoritative integration documentation, including integration architecture documents, data flow diagrams, interface control documents (ICDs), configuration guides, and operational runbooks.
• Maintain and continuously improve an accurate and comprehensive application integration catalog, tracking integration status, protocols, owners, security classifications, and configuration details for all onboarded applications.
• Collaborate with ISSMs, security architects, and compliance teams to ensure all integrations adhere to federal security requirements, Zero Trust principles, and ICAM governance standards, contributing to ATO documentation as required.
• Lead continuous improvement initiatives, identifying and implementing opportunities to streamline, automate, and enhance the application onboarding and integration enablement process through tooling, automation, and process optimization.
• Engage directly with government stakeholders and senior leadership to communicate integration strategies, onboarding roadmaps, and technical recommendations through briefings and presentations.
• Participate in and contribute to architecture review boards (ARBs), change control boards (CCBs), and platform governance activities to ensure the security and quality of ICAM integrations across the program.
• Evaluate and recommend emerging integration technologies, tools, and frameworks, providing informed assessments of their suitability for adoption within the federal ICAM integration ecosystem.

Education and Experience:
Required:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field from an accredited college or university; equivalent work experience may be considered in lieu of a degree.
• 7+ years of hands-on experience in enterprise application integration, identity and access management, or a related technical discipline.
• 5+ years of hands-on experience integrating applications with Okta and/or SailPoint platforms, including advanced SSO configuration, provisioning connector development, and lifecycle management automation.
• Demonstrated experience in a senior or lead technical role, providing guidance and mentorship to integration teams.
• Experience working in a federal government IT environment.

Clearance Requirement:

• Active Secret Clearance required.

Required Skills and Competencies:

• Exceptional communication skills in English - both written and oral - with the ability to articulate complex integration strategies and technical concepts clearly to both technical teams and non-technical application owners, program managers, and senior government stakeholders.
• Expert-level, hands-on experience configuring and managing Okta application integrations, including advanced SAML 2.0, OAuth 2.0, and OIDC-based SSO integrations, OIN catalog applications, custom application configurations, and non-standard integration scenarios.
• Expert-level, hands-on experience developing and managing SailPoint application integrations, including native connectors, SCIM-based integrations, and advanced custom connector development using the SailPoint connector framework and BeanShell/Java rule development.
• Expert knowledge of identity federation protocols and standards, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Kerberos, and their advanced application in complex enterprise integration architectures.
• Demonstrated experience leading the design and implementation of enterprise-scale automated provisioning and deprovisioning workflows in Okta and SailPoint, including complex joiner/mover/leaver process automation and event-driven lifecycle management.
• Advanced expertise with Okta Lifecycle Management, Okta Workflows, Okta Identity Engine (OIE), and Okta API Access Management capabilities and their strategic application in enterprise integration ecosystems.
• Advanced expertise with SailPoint provisioning workflows, rules, policies, and role management, including complex BeanShell and Java-based rule development for custom integration logic and workflow automation.
• Expert-level understanding of REST API design and consumption, including experience developing and troubleshooting API-based integrations and automations within ICAM platform environments.
• Demonstrated ability to lead integration testing activities, including the development of comprehensive test plans, test cases, and testing frameworks for complex ICAM integrations.
• Ability to perform advanced analysis of system logs, API responses, audit trails, and diagnostic data to troubleshoot and resolve complex, high-impact integration issues.
• Experience developing authoritative technical integration documentation, including architecture documents, interface control documents, and operational runbooks.
• Strong knowledge of Active Directory (AD), Azure Active Directory (AAD/Entra ID), and LDAP directory services and their advanced integration with Okta and SailPoint platforms.
• Comprehensive knowledge of federal ICAM frameworks and identity management standards, including FICAM, NIST SP 800-63, NIST SP 800-53, and Zero Trust Architecture principles.
• Demonstrated ability to lead technical teams, mentor junior staff, and drive the delivery of complex integration initiatives in a fast-paced, federal IT environment.

Desired Skills and Competencies:

• Experience leading large-scale application onboarding and ICAM enablement programs for federal government customers, including programs with hundreds of integrated applications.
• Okta Certified Consultant, Okta Certified Architect, or Okta Certified Developer certification.
• SailPoint Certified IdentityIQ Architect, SailPoint Identity Security Cloud Architect, or equivalent advanced SailPoint certification.
• Experience architecting and implementing ICAM integrations within FedRAMP-authorized cloud environments, including AWS GovCloud, Azure Government, or Google Cloud for Government.
• Familiarity with cloud-native IAM services such as AWS IAM, Azure AD, and Google Cloud IAM and their integration with enterprise Okta and SailPoint platforms.
• Experience with middleware and enterprise integration platforms such as MuleSoft, Azure Logic Apps, or AWS API Gateway in support of complex ICAM integration scenarios.
• Knowledge of Privileged Access Management (PAM) platforms such as CyberArk or BeyondTrust and their advanced integration with enterprise ICAM ecosystems.
• Understanding of PIV/CAC authentication mechanisms and their integration with enterprise applications within federal ICAM architectures.
• Experience with scripting and programming languages such as Python, PowerShell, Java, or JavaScript for automation of integration tasks, custom connector development, and ICAM platform extensibility.
• Familiarity with DevSecOps practices and CI/CD pipeline integrations involving ICAM platform deployments and automated application onboarding workflows.
• Experience with agentic AI and machine learning technologies and their application to intelligent integration automation, anomaly detection, and access governance within ICAM platforms.
• Knowledge of emerging identity standards and technologies, including SCIM 2.0, Continuous Access Evaluation Protocol (CAEP), Shared Signals Framework (SSF), and Verifiable Credentials.
• Experience contributing to or leading architecture review boards (ARBs) and platform governance processes in a federal IT environment.
• CISSP, Certified Cloud Security Professional (CCSP), or other relevant cybersecurity certifications.
• CompTIA Security+ or equivalent certification.
• Experience with graph-based entitlement management, identity analytics platforms, and identity intelligence tools and their integration within enterprise ICAM ecosystems.
• Familiarity with Agile and DevSecOps delivery methodologies and experience leading sprint-based delivery of complex integration capabilities within federal programs.

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com .

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352