Lead Engineer, CDO-L Study

Job not on LinkedIn

🕒 3 days ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Koniag Government Services

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1975

🏛️ Government

🎖️ Defense

💼 Consulting

Government • Defense • Consulting

Koniag Government Services is an Alaska Native Corporation (ANC) that provides technical, professional, and operational expertise to the U. S. public sector. KGS supports Defense & Intelligence, Federal Civilian, and Health customers with enterprise solutions, professional services, and operations management, and emphasizes mission-focused outcomes, contracting speed (ANC direct awards), and strategic/technology partnerships. The company positions itself as a mission partner delivering people, technology, and program management to government customers.

📋 Description

• Serve as primary technical authority for Study 1 of the DAF ICAM System Enhancement Studies effort • Lead analysis, architecture development, and documentation for a decision-ready Technical Study Report within 45 calendar days of Task Order award • Review Government-provided CDO-L requirements and catalog them by denied, degraded, intermittent, and limited-bandwidth conditions • Map requirements against DAF ICAM components including Okta UD, Okta IdP, and SailPoint IIQ • Conduct gap analysis between current DAF ICAM capabilities and CDO-L operational demands • Evaluate approved ICAM solutions across comparable Federal Defense programs • Analyze on-premises replication or caching options for identity and access data at disconnected nodes • Evaluate a tiered edge identity broker model across Connected, Degraded/Limited Bandwidth, and Denied states • Assess synchronization schedules, connectivity requirements, degraded-mode parameters, and cache staleness thresholds • Evaluate Okta Access Gateway and Tactical Identity Bridge Appliance for tactical-edge ICAM operations • Assess mirroring of SailPoint IIQ governance workflows at the edge • Document tradeoffs among full replication, selective caching, and read-only policy mirroring and recommend an approach • Develop emergency break-glass access provisioning recommendations, including governance, immutable audit logging, revocation, and re-synchronization • Evaluate PKI certificate validation, CRL caching, and local OCSP stapling for CAC authentication • Analyze endpoint security telemetry integration and autonomous access revocation based on device posture • Develop methodology for attribute transfer and synchronization between NIPRNet, SIPRNet, and disconnected nodes • Coordinate software-component identification, licensing, deployment constraints, classified-network restrictions, and interoperability considerations • Develop a phased implementation roadmap and ROM cost estimate • Consolidate study outputs into the CDO-L Technical Study Report (CDRL B010), including a draft Performance Work Statement • Verify assigned personnel hold required clearances and notify the Government of clearance changes • Present findings to the Government Program Manager and Contracting Officer's Representative • The study runs for 120 days

🎯 Requirements

• Bachelor's degree in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or a related technical field from an accredited college or university • 7+ years of experience in systems engineering, enterprise architecture, or identity and access management within Defense or Federal government IT environments • Demonstrated experience designing or analyzing identity and access management architectures in disconnected, air-gapped, or operationally constrained network environments • Experience with the DoD Authority to Operate (ATO) process and security accreditation requirements for Defense information systems • Active Secret security clearance with final adjudication required prior to assignment • Deep technical knowledge of enterprise ICAM platforms, specifically Okta Universal Directory, Identity Provider, Access Gateway, and Workflows, and SailPoint IdentityIQ • Strong understanding of Zero Trust Architecture principles and application to tactical edge and disconnected identity environments • Experience designing identity federation, replication, and caching architectures for disconnected or intermittently connected operational environments • Proficiency in PKI-based authentication, including CRL, OCSP, and CAC authentication • Knowledge of ABAC and RBAC policy frameworks and implementation within Okta and SailPoint • Familiarity with NIPRNet and SIPRNet network architecture, classification requirements, and cross-domain constraints • Ability to perform and document structured gap analyses, architectural tradeoff assessments, and comparative technology evaluations • Experience developing phased implementation roadmaps with entry/exit criteria, dependencies, and Government review and accreditation timelines • Strong technical writing skills for formal study reports, architectural documentation, and draft Performance Work Statements • Ability to work collaboratively across architects, engineers, cost analysts, and program managers • Exceptional written and oral communication skills in English • Ability to obtain and maintain a Secret security clearance • Preferred: Master's degree in a related technical field • Preferred: 10+ years of experience in Defense ICAM, enterprise identity architecture, or related cybersecurity engineering • Preferred experience supporting DISA-aligned programs or DAF/Air Force ICAM initiatives • Desired familiarity or experience with OAG, TIBA, DoD Enterprise ICAM IL5/IL6 DDIL requirements, break-glass access governance, endpoint security telemetry integration, SIEM, DISA STIGs, ROM cost estimates, Agile methodologies, and related certifications

🏖️ Benefits

• Medical, dental, and vision insurance • 401(k) retirement plan • Paid time off • Paid parental leave • Life and disability insurance • Flexible spending accounts • Commuter benefits • Tuition reimbursement