Security Lead​/Release Lead; REMOTE Security Clearance

Position: Security Lead / Release Lead (REMOTE) with Security Clearance
Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Security Lead / Release Lead with a Secret security clearance to support KITS and our government customer. The position is remote. We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Koniag IT Systems, a Koniag Government Services company, is seeking an experienced Security & Release Lead to support a critical Government Identity, Credential, and Access Management (ICAM) initiative. This role supports a large-scale Application and Systems Enablement effort issued under an ICAM Enterprise Master IDIQ Contract. The Security & Release Lead will serve as the primary authority for security compliance oversight and release management across the ICAM enablement program-ensuring that all integration solutions, platform configurations, custom tools, and application onboarding activities meet applicable DoD security requirements and that all releases into production environments are executed in a controlled, documented, and compliant manner-in direct support of the Department of Defense (DoD) Zero Trust Execution Roadmap.

The ideal candidate is an experienced security and release management professional with a strong background in federal IT security compliance, DoD cybersecurity frameworks, identity and access management, and structured release processes. This individual must be equally comfortable operating as a security subject matter expert and a disciplined release manager, capable of bridging the gap between security requirements and operational program execution in a high-volume, fast-paced federal IT environment.

This position requires an active Secret clearance and may require occasional travel to Government facilities. Primary work will be performed remotely. The Security & Release Lead will serve as the integrated security and release management authority for the ICAM Application and Systems Enablement program, responsible for ensuring that all program activities-from initial application triage through platform configuration, middleware development, and production deployment-are executed in full compliance with applicable DoD and federal security standards, and that all releases into test and production environments follow a structured, auditable, and risk-managed release process.

This individual will work closely with the program manager, deputy program manager, migration team lead, platform engineers, middleware engineers, and Government stakeholders to embed security throughout the enablement lifecycle and ensure that every production release is authorized, tested, documented, and verified prior to deployment. Principal responsibilities will include but are not limited to:
* Serve as the primary security subject matter expert (SME) for the ICAM enablement program, providing authoritative guidance on applicable DoD and federal security requirements, policies, and frameworks across all program activities and deliverables.
* Develop, implement, and maintain the program's security compliance framework, ensuring all enablement activities, platform configurations, custom tools, connectors, middleware solutions, and integration artifacts adhere to applicable security standards including DoDI 8520.04, DoDM 8140.03, DFARS , NIST SP 800-171, and all other referenced DoD and federal directives.
* Oversee and enforce Controlled Unclassified Information (CUI) handling requirements across the program, ensuring all personnel, processes, and systems comply with DoDI 5200.48, DoDM 5200.01, and applicable CUI marking, safeguarding, and dissemination requirements.
* Manage Operations Security (OPSEC) requirements across the program, ensuring OPSEC principles are incorporated into all relevant program activities, documentation, and communications in accordance with applicable DoD directives, and ensuring all subcontractors handling Critical Information comply with flowed-down OPSEC requirements.
* Lead supply chain risk management activities per DFARS 239.73, overseeing the vetting of all third-party connectors, scripts, code libraries, and enhancements integrated into the ICAM environment to prevent the introduction of cybersecurity vulnerabilities, malicious code, or unauthorized data exfiltration pathways.
* Ensure all contractor personnel maintain required DoD cybersecurity certifications per DoDM 8140.03, tracking certification status across the program team and coordinating remediation for personnel with lapsed or insufficient certifications.
* Develop, implement, and manage the program release management framework, establishing standardized processes, approval gates, documentation requirements, and rollback procedures for all releases into development, test, and production environments.
* Serve as the release authority for all production deployments, coordinating…