ICAM Controls SME (REMOTE)

This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible.

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a ICAM Controls SME to support KITS and our government customer. The position is remote.This position requires the candidate to be able to obtain a Public Trust. 

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement. 

Koniag IT Systems, LLC (KITS), a Koniag Government Services (KGS) company, is seeking an experienced ICAM Controls Subject Matter Expert (SME) to support the Department of the Air Force (DAF) Identity, Credential, and Access Management (ICAM) Program Management Office (PMO) in a SOC 1 audit-readiness capacity. The ideal candidate combines deep technical knowledge of identity governance platforms with the ability to translate technical configurations into auditable control evidence. This position requires DoDM 8140.03 baseline certification and the ability to obtain and maintain a position of trust/public trust determination to support privileged access review activities.

The ICAM Controls SME will evaluate identity governance, role and attribute mapping, Segregation of Duties (SoD), account lifecycle controls, and privileged access evidence in support of the DAF ICAM SOC 1 audit-readiness mission. 

Principal responsibilities will include but are not limited to:

• Decompose the joiner, mover, and leaver identity lifecycle into auditable control points, identifying system of record, trigger, workflow, approver, and completion evidence for each step.
• Test timeliness and completeness of provisioning, de-provisioning, periodic user recertification, and orphaned-account detection and remediation.
• Map business processes, user populations, roles, identity attributes, access policies, and entitlements to privileged and non-privileged access governance.
• Document and test the SoD rule set, including preventive and detective controls, exception approvals, and periodic review evidence.
• Coordinate with external PAM organizations to establish evidence for the Master User Record and elevated privileges; reconcile privileged-account inventories to authorized users and roles.
• Review SOC reports from upstream service providers (e.g., Okta, AWS) and assess their impact on the DAF ICAM control boundary.
• Support control traceability matrix (D003) development with technical configuration detail from Okta and SailPoint IdentityIQ platforms.
• Identify anomalies, stale privileges, or manual dependencies and recommend control or workflow improvements for Government consideration.
• Maintain evidence supporting FIAR target metrics without assuming operational ownership of PAM functions assigned to other Government organizations.

Education and Experience:
Required:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field from an accredited college or university.
• 6+ years of experience in identity governance and administration (IGA), IAM engineering, or ICAM controls evaluation.
• Direct configuration or administration experience with Okta Identity Provider (IdP) and SailPoint IdentityIQ.
• DoDM 8140.03 baseline certification appropriate to privileged access roles.

Required Skills and Competencies:

• Deep technical knowledge of identity lifecycle management, automated provisioning/de-provisioning, and access recertification workflows.
• Experience with Segregation of Duties (SoD) rule design, testing, and exception remediation.
• Familiarity with privileged access management (PAM) concepts, including CyberArk or comparable platforms.
• Ability to translate technical system configurations into control narratives and audit evidence suitable for IPA review.
• Strong collaboration skills to work with PAM, O&S, and enablement organizations without assuming operational control ownership.

Security Requirement:

• Ability to obtain and maintain a public trust/position of trust determination and CAC with NIPRNet access.

Desired Skills and Competencies:

• Experience supporting SOC 1/SSAE 18 audit engagements or federal financial-system control evaluations.
• Familiarity with Single Sign-On (SSO) protocols (SAML, OAuth2) and Zero Trust architecture principles.
• Prior experience on DoD Zero Trust, Mission Partner Environment ICAM, or data-federation initiatives.
• Salesforce, ServiceNow, or GRC tool experience for control tracking and metrics reporting.
• Experience with NIST SP 800-171 and CUI handling requirements in an identity-governance context.

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at [email protected] or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352