Job Description

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a ICAM Integration Specialist with a Secret Security clearance to support KITS and our government customer. The position is remote.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced ICAM Integration Specialist – Enablement to join a team supporting Identity, Credential, and Access Management (ICAM) solutions for our government customers. The ideal candidate is a technically skilled and collaborative professional with deep expertise in integrating enterprise applications and systems with ICAM platforms, particularly Okta and SailPoint, within a federal government environment. This individual will play a pivotal role in enabling seamless, secure, and efficient connectivity between ICAM platforms and the broader enterprise application ecosystem, driving the onboarding of applications, services, and identity sources to support mission objectives.

The ICAM Integration Specialist – Enablement will be responsible for designing, implementing, and supporting the integration of enterprise applications, systems, and identity sources with Okta and SailPoint ICAM platforms in a federal government environment. This individual will serve as a key technical resource for application onboarding, SSO enablement, identity governance integration, and lifecycle management automation, working closely with application teams, ICAM engineers, security personnel, and government stakeholders to deliver secure and scalable integration solutions.

Principal responsibilities will include but are not limited to:
• Lead and support the onboarding of enterprise applications and services to Okta and SailPoint platforms, including the configuration of SSO integrations, provisioning connectors, and access governance policies.
• Design, configure, and implement Single Sign-On (SSO) integrations between Okta and enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and other supported federation protocols.
• Develop and configure SailPoint provisioning connectors and integration modules to enable automated identity lifecycle management, including joiner/mover/leaver processes, for integrated applications and systems.
• Collaborate with application owners, development teams, and system administrators to gather integration requirements, assess technical feasibility, and develop integration designs and implementation plans.
• Configure and maintain Okta application integrations, including the Okta Integration Network (OIN), custom SAML/OIDC applications, and API-based integrations leveraging Okta's REST APIs.
• Develop and maintain SailPoint application integrations using native connectors, SCIM, REST APIs, and custom connector development as required to support identity governance and provisioning workflows.
• Implement and maintain Okta Lifecycle Management policies and SailPoint provisioning workflows to automate user provisioning, deprovisioning, and access changes across integrated applications.
• Support the configuration and maintenance of Okta Workflows and SailPoint workflow rules to automate identity-related processes and enable event-driven integration scenarios.
• Conduct integration testing, including functional testing, regression testing, and user acceptance testing (UAT), to validate the correctness and security of ICAM integrations prior to production deployment.
• Troubleshoot and resolve complex integration issues across Okta and SailPoint environments, analyzing logs, API responses, and system events to identify root causes and implement solutions.
• Develop and maintain comprehensive integration documentation, including integration design documents, data flow diagrams, configuration guides, and runbooks for all onboarded applications.
• Maintain an accurate and up-to-date application integration catalog, tracking integration status, protocols, owners, and configuration details for all applications onboarded to the ICAM platform.
• Collaborate with security teams and ISSMs to ensure all integrations comply with federal security requirements, access control policies, and ICAM governance standards.
• Support the development and enforcement of application onboarding standards, integration patterns, and best practices to ensure consistency and quality across the ICAM integration portfolio.
• Participate in change management processes, assessing the security and operational impact of proposed integration changes and supporting their review and approval.
• Provide technical guidance and enablement support to application teams navigating the ICAM integration process, serving as a subject matter expert and point of contact throughout the onboarding lifecycle.
• Support continuous improvement initiatives by identifying opportunities to streamline, automate, and enhance the application onboarding and integration enablement process.

Education and Experience:
Required:
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field from an accredited college or university; equivalent work experience may be considered in lieu of a degree.
• 4+ years of hands-on experience in enterprise application integration, identity and access management, or a related technical discipline.
• 3+ years of hands-on experience integrating applications with Okta and/or SailPoint platforms, including SSO configuration and provisioning connector development.
• Experience working in a federal government IT environment.

Clearance Requirement:
• Active Secret Clearance required

Required Skills and Competencies:
• Exceptional communication skills in English – both written and oral – with the ability to communicate complex integration concepts clearly to both technical teams and non-technical application owners and government stakeholders.
• Hands-on experience configuring and managing Okta application integrations, including SAML 2.0, OAuth 2.0, and OIDC-based SSO integrations, OIN catalog applications, and custom application configurations.
• Hands-on experience developing and managing SailPoint application integrations, including native connectors, SCIM-based integrations, and custom connector development using the SailPoint connector framework.
• Strong working knowledge of identity federation protocols and standards, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, and LDAP, and their practical application in enterprise integration scenarios.
• Experience implementing automated provisioning and deprovisioning workflows in Okta and SailPoint, including joiner/mover/leaver process automation and event-driven lifecycle management.
• Familiarity with Okta Lifecycle Management, Okta Workflows, and Okta API Access Management capabilities and their application in enterprise integration scenarios.
• Experience with SailPoint provisioning workflows, rules, and policies, including BeanShell or Java-based rule development for custom integration logic.
• Strong understanding of REST API concepts and experience consuming and troubleshooting REST APIs in the context of ICAM platform integrations.
• Experience conducting integration testing, including functional testing, regression testing, and UAT, to validate ICAM integrations prior to production deployment.
• Ability to analyze and interpret system logs, API responses, and audit trails to troubleshoot and resolve complex integration issues.
• Experience developing and maintaining technical integration documentation, including design documents, data flow diagrams, and configuration guides.
• Knowledge of Active Directory (AD), Azure Active Directory (AAD/Entra ID), and LDAP directory services and their role in ICAM integration scenarios.
• Familiarity with federal ICAM frameworks and identity management standards, including FICAM, NIST SP 800-63, and Zero Trust Architecture principles.
• Demonstrated ability to manage multiple integration projects and priorities simultaneously in a fast-paced, team-oriented environment.

Desired Skills and Competencies:
• Experience supporting large-scale application onboarding and ICAM enablement programs in a federal government environment.
• Okta Certified Administrator, Okta Certified Consultant, or Okta Certified Developer certification.
• SailPoint Certified IdentityIQ Engineer, SailPoint Identity Security Cloud Engineer, or equivalent SailPoint certification.
• Experience integrating ICAM platforms with cloud-native applications and services hosted on AWS, Azure, or Google Cloud, including familiarity with cloud IAM services.
• Familiarity with FedRAMP authorization requirements and the security considerations associated with integrating FedRAMP-authorized applications with federal ICAM platforms.
• Experience with middleware and integration platforms such as MuleSoft, Azure Logic Apps, or AWS API Gateway in support of ICAM integration scenarios.
• Knowledge of Privileged Access Management (PAM) platforms such as CyberArk or BeyondTrust and their integration with enterprise ICAM ecosystems.
• Understanding of PIV/CAC authentication and its integration with enterprise applications within federal ICAM architectures.
• Experience with scripting languages such as Python, PowerShell, or JavaScript for automation of integration tasks and custom connector development.
• Familiarity with DevSecOps practices and CI/CD pipeline integrations involving ICAM platform deployments and application onboarding automation.
• Experience with graph-based entitlement management and identity analytics tools and their integration within ICAM platforms.
• Knowledge of emerging identity standards and technologies, including SCIM 2.0, Continuous Access Evaluation Protocol (CAEP), and Shared Signals Framework (SSF).
• CISSP, CompTIA Security+, or other relevant cybersecurity certifications.
• Experience participating in Agile development teams and contributing to sprint-based delivery of integration capabilities.

Our Equal Employment Opportunity Policy
The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352