Okta/SailPoint Engineer

🔥 1 hour ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Koniag Government Services

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1975

🏛️ Government

🎖️ Defense

💼 Consulting

Government • Defense • Consulting

Koniag Government Services is an Alaska Native Corporation (ANC) that provides technical, professional, and operational expertise to the U. S. public sector. KGS supports Defense & Intelligence, Federal Civilian, and Health customers with enterprise solutions, professional services, and operations management, and emphasizes mission-focused outcomes, contracting speed (ANC direct awards), and strategic/technology partnerships. The company positions itself as a mission partner delivering people, technology, and program management to government customers.

📋 Description

• Serve as the primary technical SME for the Okta Identity Provider (IdP) platform, including the administration, configuration, and ongoing optimization of Okta Universal Directory, SSO integrations, MFA policies, application integrations, and identity federation services. • Serve as the primary technical SME for SailPoint IdentityIQ (IIQ), including the administration, configuration, and ongoing optimization of identity governance workflows, automated provisioning and deprovisioning, entitlement management, access certification campaigns, and Segregation of Duties (SOD) enforcement. • Design, configure, and deploy application integrations with the Okta IdP using industry-standard protocols including SAML, OAuth 2.0, OIDC, and SCIM. • Design, configure, and deploy application integrations with SailPoint IIQ, including the setup of application connectors, automated provisioning workflows, role and entitlement models, access request processes, and audit reporting capabilities. • Engineer and develop custom connectors, scripts, APIs, and middleware solutions to facilitate the integration of legacy applications that cannot natively support modern identity protocols or standard SailPoint/Okta connectors. • Develop, implement, and sustain the identity protocol connectors and APIs that application owners will use to connect their systems to the ICAM technical stack. • Provide deep technical guidance and platform-specific expertise to migration engineers and application owners throughout the enablement lifecycle. • Support the configuration and management of alternative credential solutions and non-PKI based authentication mechanisms. • Administer and maintain Okta Universal Directory as the Authoritative Directory Aggregator. • Implement and enforce access control models including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) configurations. • Support the establishment and ongoing maintenance of Single Sign-On (SSO) integrations and Active Directory connections. • Monitor platform health, performance, and security across the Okta and SailPoint environments. • Contribute to the development and maintenance of platform runbooks, integration guides, and standard operating procedures. • Support the testing program by developing integration test cases and executing platform-level testing. • Ensure all platform configurations comply with applicable DoD security requirements. • Vet all third-party connectors, scripts, code libraries, and enhancements integrated into the ICAM environment. • Maintain current knowledge of Okta and SailPoint platform updates, new features, and evolving identity standards.

🎯 Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field from an accredited college or university. • Minimum of 5 years of hands-on experience in information technology, with at least 3 years of direct, production-level experience administering and configuring Okta and/or SailPoint IdentityIQ in an enterprise environment. • Demonstrated experience designing and implementing SSO integrations using SAML, OAuth 2.0, and OIDC in a production enterprise environment. • Demonstrated experience configuring automated provisioning and deprovisioning workflows, entitlement management, and access certification campaigns within SailPoint IIQ. • Active Secret clearance. Must be able to satisfy requirements for CAC-card issuance and NIPRNet access, including annual DoD CyberAwareness training and certification. • Deep, hands-on technical expertise with the Okta Identity Provider platform. • Deep, hands-on technical expertise with SailPoint IdentityIQ (IIQ). • Strong working knowledge and practical implementation experience with SAML 2.0, OAuth 2.0, OIDC, and SCIM identity and authorization protocols. • Experience developing custom integration solutions including scripts, connectors, REST APIs, and middleware to bridge legacy or non-standard applications with modern identity platforms. • Proficiency in one or more scripting or programming languages commonly used in identity engineering contexts, such as Java, Python, JavaScript, PowerShell, or BeanShell.

🏖️ Benefits

• health, dental and vision insurance • 401K with company matching • flexible spending accounts • paid holidays • three weeks paid time off • extraordinary benefits package