Senior ICAM

Koniag Data Solutions, LLC, a Koniag Government Services company, is seeking a Senior ICAM to support KDS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Koniag Data Solutions, a Koniag Government Services company, is seeking an experienced Senior Identity, Credential, and Access Management (ICAM) Specialist to support the design, implementation, and management of ICAM programs and capabilities in support of the U.S. Small Business Administration (SBA). The ideal candidate is a senior-level identity and access management professional with deep expertise in federal ICAM frameworks, technologies, and implementation methodologies, and a proven track record of leading ICAM initiatives within complex federal government environments. This individual will serve as the subject matter expert and technical leader for SBA's ICAM program, driving the strategic planning, architectural design, and implementation of ICAM capabilities across SBA's enterprise IT environment in alignment with federal ICAM mandates, OMB guidance, and CISA's ICAM architecture and Zero Trust requirements.

The Senior ICAM Specialist will serve as the senior technical lead and SME for ICAM architecture, implementation, and operations at the SBA, working closely with SBA's IT leadership, security teams, program managers, and external partners to develop and execute a comprehensive ICAM strategy that modernizes SBA's identity and access management capabilities and strengthens its overall cybersecurity and Zero Trust posture.

Principal responsibilities will include but are not limited to:

• Serve as the senior SME and technical lead for ICAM architecture, implementation, and operations at the SBA, providing expert guidance, strategic direction, and technical leadership on all aspects of SBA's ICAM program.
• Develop, maintain, and continuously refine SBA's ICAM strategy, roadmap, and implementation plan, ensuring alignment with OMB Memorandum M-19-17, FICAM architecture, NIST SP 800-63, NIST SP 800-53 identity and access management control families, and other applicable federal ICAM mandates and guidance.
• Lead the design and development of ICAM architectural solutions supporting identity governance, credential management, and access management across SBA's enterprise, including cloud, on-premises, and hybrid environments.
• Assess SBA's current ICAM capabilities, technologies, and processes against federal ICAM requirements and Zero Trust principles, identifying gaps, risks, and prioritized opportunities for improvement.
• Develop and maintain comprehensive ICAM architecture documentation including reference architectures, solution designs, implementation guides, and architecture decision records to support SBA's ICAM program.
• Lead the design, implementation, and management of enterprise identity governance and administration (IGA) capabilities including identity lifecycle management, role-based access control (RBAC), attribute-based access control (ABAC), and access certification processes.
• Provide expert technical guidance on the selection, configuration, and integration of ICAM technologies including identity providers (IdPs), multi-factor authentication (MFA) solutions, privileged access management (PAM) tools, single sign-on (SSO) platforms, and directory services.
• Lead and support the implementation and management of Personal Identity Verification (PIV) and derived credential programs in accordance with HSPD-12, FIPS 201, and applicable NIST guidelines.
• Oversee the design and implementation of SBA's privileged access management (PAM) program, ensuring privileged accounts and access are properly managed, monitored, and controlled in accordance with federal requirements and Zero Trust principles.
• Lead and support the integration of ICAM capabilities with SBA's broader Zero Trust architecture, ensuring identity serves as a foundational pillar of SBA's Zero Trust implementation in accordance with CISA's Zero Trust Maturity Model.
• Collaborate with SBA's IT, security, network, application, and data teams to integrate ICAM capabilities into existing and planned systems, infrastructure, and processes, ensuring consistent and effective identity and access management across the enterprise.
• Develop and deliver ICAM program briefings, progress reports, and strategic recommendations for SBA senior leadership, providing clear communication of ICAM concepts, implementation progress, risk reduction benefits, and program performance metrics.
• Serve as SBA's representative and technical SME in engagements with OMB, CISA, GSA, and other federal partners on ICAM-related matters, including participation in interagency ICAM working groups and forums.
• Support the development of ICAM-related policies, standards, and guidelines for SBA, ensuring they reflect current federal requirements and best practices and provide clear direction for SBA personnel and contractors.
• Provide technical oversight and guidance for ICAM implementation projects, working with project managers and technical teams to ensure solutions are implemented in accordance with architectural designs and SBA security and compliance requirements.
• Lead and mentor junior and mid-level ICAM specialists and team members, fostering a collaborative, high-performing team environment and supporting the professional development of staff.
• Stay current on emerging ICAM technologies, federal policy updates, and industry best practices, applying this knowledge to continuously refine and improve SBA's ICAM program and capabilities.

Education and Experience:
Required:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Systems Engineering, or a related field from an accredited college or university, OR equivalent combination of education and extensive relevant work experience.
• 7+ years of progressive experience in identity and access management, cybersecurity, or IT, with significant demonstrated experience in ICAM program design, implementation, and management in a federal government or large enterprise environment.
• Demonstrated expert-level knowledge and hands-on experience with federal ICAM frameworks, standards, and technologies including FICAM architecture, NIST SP 800-63, NIST SP 800-53 identity control families, HSPD-12, and FIPS 201.
• Demonstrated experience leading or significantly contributing to ICAM architecture design, implementation, and program management in a federal agency or large enterprise environment.
• One or more of the following certifications: Certified Identity and Access Manager (CIAM), Certified Information Systems Security Professional (CISSP), or equivalent senior-level cybersecurity or identity management certification.

Desired:

• Master's degree in Cybersecurity, Information Technology, Systems Engineering, or a related field.
• Prior experience leading ICAM program design and implementation at a federal civilian agency, preferably the SBA or a similar organization.
• Certified Cloud Security Professional (CCSP), Microsoft Certified: Identity and Access Administrator Associate, or other relevant cloud identity and access management certifications.

Required Skills and Competencies:

• Expert-level knowledge of federal ICAM frameworks, standards, and requirements including FICAM architecture, OMB M-19-17, NIST SP 800-63, NIST SP 800-53 identity and access management control families, HSPD-12, and FIPS 201, with the ability to apply this knowledge to lead and manage a comprehensive federal agency ICAM program.
• Demonstrated ability to develop comprehensive ICAM architecture strategies, roadmaps, and implementation plans aligned with federal mandates and agency-specific mission requirements and constraints.
• Deep technical expertise across all ICAM domains including identity governance and administration (IGA), credential management, multi-factor authentication (MFA), privileged access management (PAM), single sign-on (SSO), and directory services.
• Extensive hands-on experience with ICAM technologies and platforms including identity providers such as Active Directory, Azure AD/Entra ID, and Okta; MFA solutions; PAM tools such as CyberArk, BeyondTrust, or Delinea; and SSO platforms.
• Strong experience with federal PIV and derived credential programs including the implementation and management of PIV-enabled authentication in accordance with HSPD-12, FIPS 201, and NIST SP 800-73.
• Demonstrated experience integrating ICAM capabilities with Zero Trust architecture frameworks in accordance with CISA's Zero Trust Maturity Model and federal Zero Trust mandates.
• Proven ability to assess complex federal IT environments against ICAM requirements and Zero Trust principles, identify gaps and risks, and develop prioritized, actionable improvement plans.
• Experience developing comprehensive ICAM architecture documentation including reference architectures, solution designs, implementation guides, and architecture decision records.
• Strong understanding of federal cybersecurity frameworks and requirements including NIST SP 800-53, FISMA, FedRAMP, and relevant OMB and CISA guidance, and their relationship to ICAM implementation.
• Exceptional written and oral communication skills in English, with the ability to communicate complex ICAM concepts, architectural designs, and strategic recommendations to both technical teams and senior non-technical audiences.
• Strong leadership and mentorship skills with demonstrated experience guiding and developing junior and mid-level ICAM specialists and team members.
• Ability to obtain and maintain a Public Trust clearance as required by the SBA.

Desired Skills and Competencies:

• Prior experience leading or significantly contributing to ICAM program design and implementation at the SBA or a similar federal civilian agency.
• In-depth familiarity with SBA's IT environment, mission areas, and existing ICAM capabilities, including an understanding of the unique challenges and opportunities associated with modernizing ICAM within the SBA environment.
• Expert knowledge of cloud identity and access management architectures and technologies including Azure AD/Entra ID, AWS IAM, and Google Cloud Identity and their integration into a comprehensive federal ICAM program.
• Experience with identity federation and trust framework implementations including SAML, OAuth2, OpenID Connect, and their application to cross-agency and external partner identity management scenarios.
• Advanced knowledge of privileged access management (PAM) program design and implementation including the management of privileged accounts, just-in-time (JIT) access, and privileged session management in a federal environment.
• Experience with identity analytics and identity threat detection and response (ITDR) capabilities and their application to improving ICAM program security and effectiveness.
• Certified Identity and Access Manager (CIAM), Microsoft Certified: Identity and Access Administrator Associate, or other relevant identity management certifications.
• Certified Cloud Security Professional (CCSP), AWS Certified Security - Specialty, or other relevant cloud security certifications.
• Experience participating in federal interagency ICAM working groups, GSA FICAM program engagements, or OMB oversight activities related to ICAM implementation.
• Familiarity with supply chain risk management (SCRM) principles and their application to ICAM technology selection and implementation.
• Experience with DevSecOps practices and the integration of ICAM capabilities into CI/CD pipelines and application development processes to support secure by design principles.
• Familiarity with emerging identity technologies and standards including decentralized identity, verifiable credentials, and their potential application within a federal ICAM context.

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352