Lead Engineer, CDO-L Study

🕒 il y a 1 mois

🏛️ District of Columbia, Washington – Distant

infoinfo

⏰ Temps Plein

🟠 Senior

🧑‍💻 Développeur Full-Stack

🗣️🇺🇸🇬🇧 Anglais requis

Cyber Security

D'où vient cette offre

Publiée sur la page carrières de Koniag Government Services, pas via un site d'emploi

Repérée par Remote Rocketship il y a 1 mois

Toujours ouverte sur le site de Koniag Government Services. Vérifiée il y a 7 heures.

Logo of Koniag Government Services

Koniag Government Services

1001 - 5000 employés

Fondée en 1975

🏛️ Gouvernement

🎖️ Défense

💼 Conseil

Government • Defense • Consulting

Koniag Government Services est une société indigène d'Alaska (ANC) qui fournit une expertise technique, professionnelle et opérationnelle au secteur public américain. KGS soutient les clients de la Défense et du Renseignement, les civils fédéraux, et ceux de la Santé avec des solutions d'entreprise, des services professionnels et une gestion des opérations. Elle met l'accent sur des résultats axés sur la mission, une rapidité de contractualisation (récompenses directes ANC) et des partenariats stratégiques/technologiques. L'entreprise se positionne comme un partenaire de mission fournissant du personnel, de la technologie et de la gestion de programmes à ses clients gouvernementaux.

Description

• Lead Study 1 as the primary technical authority for the DAF ICAM System Enhancement Studies effort • Review and catalog Government-provided CDO-L requirements by operational condition • Map requirements against Okta Universal Directory, Okta Identity Provider, and SailPoint IdentityIQ • Conduct gap analysis between current DAF ICAM capabilities and CDO-L operational demands • Evaluate approved ICAM solutions across comparable Federal Defense programs • Analyze on-premises replication and caching options for disconnected nodes • Evaluate tiered edge identity broker models across connected, degraded/limited-bandwidth, and denied states • Document synchronization schedules, connectivity requirements, degraded-mode parameters, and cache staleness thresholds • Evaluate Okta Access Gateway and Tactical Identity Bridge Appliance for tactical-edge ICAM operations • Assess mirroring of SailPoint IdentityIQ governance workflows at the edge • Document tradeoffs among full replication, selective caching, and read-only policy mirroring • Develop break-glass access provisioning recommendations with governance, immutable audit logging, revocation, and re-synchronization • Evaluate CRL caching and OCSP stapling for CAC authentication in CDO-L conditions • Analyze integration of local endpoint security telemetry with the identity layer and autonomous access revocation • Develop methodology for attribute transfer and synchronization between NIPRNet, SIPRNet, and disconnected nodes • Coordinate identification of software components, licensing, deployment constraints, classified-network restrictions, and interoperability considerations • Develop a phased implementation roadmap and ROM cost estimate • Consolidate outputs into the CDO-L Technical Study Report (CDRL B010), including a draft Performance Work Statement • Verify assigned personnel hold required clearances and report clearance changes • Present study findings to the Government Program Manager and COR • Complete the study within 120 days, with the decision-ready Technical Study Report due within 45 calendar days of Task Order award

🎯 Exigences

• Bachelor's degree in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or a related technical field from an accredited college or university • 7+ years of experience in systems engineering, enterprise architecture, or identity and access management within Defense or Federal government IT environments • Demonstrated experience designing or analyzing identity and access management architectures in disconnected, air-gapped, or operationally constrained network environments • Experience with the DoD Authority to Operate (ATO) process and security accreditation requirements for Defense information systems • Active Secret security clearance with final adjudication required prior to assignment • Deep technical knowledge of enterprise ICAM platforms, specifically Okta Universal Directory, Identity Provider, Access Gateway, Workflows, and SailPoint IdentityIQ • Strong understanding of Zero Trust Architecture principles • Experience designing identity federation, replication, and caching architectures for disconnected or intermittently connected environments • Proficiency in PKI-based authentication, including CRL, OCSP, and CAC authentication • Knowledge of ABAC and RBAC policy frameworks and implementation within Okta and SailPoint • Familiarity with NIPRNet and SIPRNet architecture, classification requirements, and cross-domain constraints • Ability to perform structured gap analyses, architectural tradeoff assessments, and comparative technology evaluations • Experience developing phased implementation roadmaps with entry/exit criteria, dependencies, and Government review and accreditation timelines • Strong technical writing skills for formal study reports, architectural documentation, and draft Performance Work Statements • Ability to collaborate across architects, engineers, cost analysts, and program managers • Exceptional written and oral communication skills in English • Ability to obtain and maintain a Secret security clearance • Preferred: Master's degree in a related technical field • Preferred: 10+ years of experience in Defense ICAM, enterprise identity architecture, or related cybersecurity engineering • Preferred: Experience supporting DISA-aligned programs or DAF/Air Force ICAM initiatives • Desired: Experience with Okta Access Gateway and/or Tactical Identity Bridge Appliance • Desired: Familiarity with DoD Enterprise ICAM IL5/IL6 DDIL requirements and DoD ICAM policy frameworks • Desired: Knowledge of break-glass access provisioning governance and audit/logging requirements • Desired: Experience integrating endpoint security telemetry with IAM platforms • Desired: Familiarity with SIEM systems and audit log consolidation • Desired: Knowledge of DISA STIGs • Desired: Experience developing ROM cost estimates • Desired: Okta, SailPoint, CISSP, CISM, or equivalent certification • Desired: Experience supporting DAF, Air Force, or Space Force IT modernization programs • Desired: Familiarity with Agile methodologies in hybrid Agile/Waterfall Government environments

🏖️ Avantages

• Equal employment opportunity policy • Accommodation support for applicants with disabilities • Employee and corporate culture supporting native communities • Enterprise solutions, professional services, and operational management environment • Shareholder Preference in accordance with Public Law 88-352

Postuler Maintenant

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Emplois Similaires

🕒 il y a 1 mois

Danaher Corporation

10 000+ employés

🏥 Santé

💼 Conseil

📦 Logistique

Lead OT network segmentation, firewall, and DMZ projects for Danaher’s global life sciences manufacturing operations. Serve as senior technical resource across multiple operating companies and sites.

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

Timely

51 - 200

📚 Éducation

☁️ SaaS

🤖 Intelligence artificielle

Senior Software Engineer building optimization, AI, and data systems for Timely’s school scheduling platform. Leading scalable engineering projects that improve schedules for educators and students.

🇺🇸 États-Unis – Télétravail

💰 Early Stage VC en 2022-12

⏰ Temps Plein

🟠 Senior

🧑‍💻 Développeur Full-Stack

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

Conduit

1 - 10

₿ Crypto

🌐 Web 3

Software Engineer building Conduit’s blockchain infrastructure control plane for provisioning, reconciliation, and usage reporting. Designing reliable backend integrations and internal tooling for on-chain applications.

🗣️🇺🇸🇬🇧 Anglais requis

Web3

Go

🕒 il y a 1 mois

Code Metal

51 - 200

🚀 Aérospatiale

🚘 Automobile

🎖️ Défense

Senior Software Engineer building AI-enabled, formally verified code transpilation tools at Code Metal. Bridging high-level algorithms with embedded systems deployment through C/C++ and Python pipelines.

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

🧑‍💻 Développeur Full-Stack

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

The Motley Fool

501 - 1000

💼 Conseil

📣 Marketing

💸 Finance

Product Tech Lead leading engineering teams building scalable web applications for The Motley Fool’s financial services and media business. Driving architecture, delivery, and AI-assisted development.

🇺🇸 États-Unis – Télétravail

💵 $185 000 - $215 000 / an

💰 €25 000 000 Private Equity Round en 2009-11

⏰ Temps Plein

🟠 Senior

🧑‍💻 Développeur Full-Stack

🗣️🇺🇸🇬🇧 Anglais requis

Développé par Lior Neu-ner. J'aimerais beaucoup recevoir vos retours — contactez-moi en DM ou par e-mail support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok