Job Description
Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a SailPoint Support Engineer with a Secret Security clearance to support KITS and our government customer. The position is remote.
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced ICAM SailPoint Support Engineer to join a team supporting Identity, Credential, and Access Management (ICAM) solutions for our government customers. The ideal candidate is a technically skilled professional with a strong background in identity and access management technologies, particularly within the SailPoint platform, and is passionate about delivering secure and reliable solutions in a federal environment.
The ICAM SailPoint Support Engineer will provide technical support, configuration, administration, and maintenance of SailPoint-based Identity, Credential, and Access Management solutions in a federal government environment. The engineer will work closely with security teams, system administrators, and government stakeholders to ensure the integrity, availability, and security of identity governance and access management systems.
Principal responsibilities will include but are not limited to:
• Provide day-to-day administration, configuration, and support of the SailPoint platform, including identity lifecycle management, role management, access certifications, and provisioning workflows.
• Troubleshoot and resolve ICAM-related incidents, service requests, and problems in a timely manner, adhering to established SLAs.
• Configure and maintain SailPoint Identity Security Cloud (ISC) or IdentityIQ (IIQ) features including access certifications, role-based access control (RBAC), separation of duties (SoD) policies, and automated provisioning/deprovisioning.
• Integrate SailPoint with enterprise applications, directories, and third-party services using REST APIs, SCIM, and connector frameworks.
• Support the onboarding and offboarding of users, roles, and applications within the SailPoint environment.
• Monitor system health, review logs, and proactively identify and address potential issues within the ICAM ecosystem.
• Collaborate with security and compliance teams to ensure IAM configurations meet federal security standards and frameworks, including NIST guidelines and Zero Trust principles.
• Assist in the development and maintenance of technical documentation, standard operating procedures (SOPs), and runbooks related to ICAM and SailPoint operations.
• Participate in change management processes, including planning, testing, and implementing changes to the SailPoint environment.
• Support audits and compliance reviews by generating access reports, certification campaigns, and configuration documentation.
• Work with cross-functional teams to evaluate and implement new SailPoint features and capabilities that align with mission requirements.
• Provide Tier 2/Tier 3 support for escalated identity governance and access management issues.
Education and Experience:
Required:
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field from an accredited college or university; equivalent work experience may be considered in lieu of a degree.
• 3+ years of hands-on experience administering and supporting SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud (ISC), or a comparable Identity Governance and Administration (IGA) platform.
• Active Secret Clearance required.
• Relevant SailPoint certification(s) required (e.g., SailPoint Certified IdentityIQ Engineer, SailPoint Identity Security Cloud Engineer, or SailPoint Certified Administrator).
Required Skills and Competencies:
• Exceptional communication skills in English – both written and oral – with the ability to communicate effectively with technical and non-technical stakeholders.
• Hands-on experience administering the SailPoint platform, including identity lifecycle management, access certifications, role management, provisioning workflows, and SoD policy enforcement.
• Strong understanding of Identity Governance and Administration (IGA) concepts including joiner/mover/leaver processes, RBAC, and entitlement management.
• Experience integrating SailPoint with Active Directory (AD), LDAP, and enterprise applications via native connectors or REST/SCIM APIs.
• Familiarity with ICAM frameworks, principles, and federal identity management standards (e.g., NIST SP 800-63, FICAM).
• Experience supporting users and applications in a ticketing/ITSM environment (e.g., ServiceNow, Jira).
• Ability to analyze and interpret system logs to diagnose and resolve identity governance and provisioning issues.
• Knowledge of role-based access control (RBAC) and attribute-based access control (ABAC) models and their implementation within SailPoint.
• Knowledge of Zero Trust Architecture principles and their application to identity governance and access management.
• Ability to create and maintain clear technical documentation, SOPs, and runbooks.
• Demonstrated ability to work both independently and collaboratively in a team environment.
Clearance Requirement:
• Active Secret Clearance
Desired Skills and Competencies:
• Experience working in a federal government IT environment supporting ICAM programs.
• SailPoint Certified IdentityIQ Architect or SailPoint Identity Security Cloud Architect certification.
• Experience with SailPoint BeanShell/Java scripting for custom rule development and workflow configuration.
• Familiarity with Privileged Access Management (PAM) solutions and concepts, such as CyberArk or BeyondTrust.
• Experience with DevSecOps practices and CI/CD pipeline integrations involving identity services.
• Knowledge of cloud platforms such as AWS, Azure, or Google Cloud and their native IAM services.
• Experience with scripting languages (e.g., Python, PowerShell) for automation of identity management and provisioning tasks.
• Familiarity with additional IAM/ICAM platforms such as Okta, Ping Identity, or ForgeRock.
• Understanding of PIV/CAC authentication and its integration within federal environments.
• Experience supporting ATO (Authority to Operate) processes and contributing to security documentation such as System Security Plans (SSPs).
• CISSP, Security+, or other relevant cybersecurity certifications.
Our Equal Employment Opportunity Policy
The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352
