Lead Engineer, CDO-L Study

🕒 September 16

🏛️ District of Columbia, Washington – Remote

🏛️ District of Columbia – Remote ☕ Washington – Remote

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 28%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Koniag Government Services

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1975

🏛️ Government

🎖️ Defense

💼 Consulting

Government • Defense • Consulting

Koniag Government Services is an Alaska Native Corporation (ANC) that provides technical, professional, and operational expertise to the U. S. public sector. KGS supports Defense & Intelligence, Federal Civilian, and Health customers with enterprise solutions, professional services, and operations management, and emphasizes mission-focused outcomes, contracting speed (ANC direct awards), and strategic/technology partnerships. The company positions itself as a mission partner delivering people, technology, and program management to government customers.

📋 Description

• Lead Study 1 as the primary technical authority for the DAF ICAM System Enhancement Studies effort • Review and catalog Government-provided CDO-L requirements by operational condition • Map requirements against Okta Universal Directory, Okta Identity Provider, and SailPoint IdentityIQ • Conduct gap analysis between current DAF ICAM capabilities and CDO-L operational demands • Evaluate approved ICAM solutions across comparable Federal Defense programs • Analyze on-premises replication and caching options for disconnected nodes • Evaluate tiered edge identity broker models across connected, degraded/limited-bandwidth, and denied states • Document synchronization schedules, connectivity requirements, degraded-mode parameters, and cache staleness thresholds • Evaluate Okta Access Gateway and Tactical Identity Bridge Appliance for tactical-edge ICAM operations • Assess mirroring of SailPoint IdentityIQ governance workflows at the edge • Document tradeoffs among full replication, selective caching, and read-only policy mirroring • Develop break-glass access provisioning recommendations with governance, immutable audit logging, revocation, and re-synchronization • Evaluate CRL caching and OCSP stapling for CAC authentication in CDO-L conditions • Analyze integration of local endpoint security telemetry with the identity layer and autonomous access revocation • Develop methodology for attribute transfer and synchronization between NIPRNet, SIPRNet, and disconnected nodes • Coordinate identification of software components, licensing, deployment constraints, classified-network restrictions, and interoperability considerations • Develop a phased implementation roadmap and ROM cost estimate • Consolidate outputs into the CDO-L Technical Study Report (CDRL B010), including a draft Performance Work Statement • Verify assigned personnel hold required clearances and report clearance changes • Present study findings to the Government Program Manager and COR • Complete the study within 120 days, with the decision-ready Technical Study Report due within 45 calendar days of Task Order award

🎯 Requirements

• Bachelor's degree in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or a related technical field from an accredited college or university • 7+ years of experience in systems engineering, enterprise architecture, or identity and access management within Defense or Federal government IT environments • Demonstrated experience designing or analyzing identity and access management architectures in disconnected, air-gapped, or operationally constrained network environments • Experience with the DoD Authority to Operate (ATO) process and security accreditation requirements for Defense information systems • Active Secret security clearance with final adjudication required prior to assignment • Deep technical knowledge of enterprise ICAM platforms, specifically Okta Universal Directory, Identity Provider, Access Gateway, Workflows, and SailPoint IdentityIQ • Strong understanding of Zero Trust Architecture principles • Experience designing identity federation, replication, and caching architectures for disconnected or intermittently connected environments • Proficiency in PKI-based authentication, including CRL, OCSP, and CAC authentication • Knowledge of ABAC and RBAC policy frameworks and implementation within Okta and SailPoint • Familiarity with NIPRNet and SIPRNet architecture, classification requirements, and cross-domain constraints • Ability to perform structured gap analyses, architectural tradeoff assessments, and comparative technology evaluations • Experience developing phased implementation roadmaps with entry/exit criteria, dependencies, and Government review and accreditation timelines • Strong technical writing skills for formal study reports, architectural documentation, and draft Performance Work Statements • Ability to collaborate across architects, engineers, cost analysts, and program managers • Exceptional written and oral communication skills in English • Ability to obtain and maintain a Secret security clearance • Preferred: Master's degree in a related technical field • Preferred: 10+ years of experience in Defense ICAM, enterprise identity architecture, or related cybersecurity engineering • Preferred: Experience supporting DISA-aligned programs or DAF/Air Force ICAM initiatives • Desired: Experience with Okta Access Gateway and/or Tactical Identity Bridge Appliance • Desired: Familiarity with DoD Enterprise ICAM IL5/IL6 DDIL requirements and DoD ICAM policy frameworks • Desired: Knowledge of break-glass access provisioning governance and audit/logging requirements • Desired: Experience integrating endpoint security telemetry with IAM platforms • Desired: Familiarity with SIEM systems and audit log consolidation • Desired: Knowledge of DISA STIGs • Desired: Experience developing ROM cost estimates • Desired: Okta, SailPoint, CISSP, CISM, or equivalent certification • Desired: Experience supporting DAF, Air Force, or Space Force IT modernization programs • Desired: Familiarity with Agile methodologies in hybrid Agile/Waterfall Government environments

🏖️ Benefits

• Equal employment opportunity policy • Accommodation support for applicants with disabilities • Employee and corporate culture supporting native communities • Enterprise solutions, professional services, and operational management environment • Shareholder Preference in accordance with Public Law 88-352

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume