Okta​/SailPoint Engineer; REMOTE Security Clearance

Position: Okta/SailPoint Engineer (REMOTE) with Security Clearance
Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an Okta/SailPoint Engineer with a Secret security clearance to support KITS and our government customer. The position is remote. We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Koniag IT Systems, a Koniag Government Services company, is seeking an experienced Okta/SailPoint Engineer to support a critical Government Identity, Credential, and Access Management (ICAM) initiative. This role supports a large-scale Application and Systems Enablement effort issued under an ICAM Enterprise Master IDIQ Contract. The Okta/SailPoint Engineer will serve as a dedicated platform specialist responsible for the configuration, administration, integration, and sustainment of the centralized ICAM technical stack-leveraging Okta for Identity Provider (IdP) services and SailPoint Identity IQ (IIQ) for Identity Governance and Administration (IGA)-in direct support of the Department of Defense (DoD) Zero Trust Execution Roadmap.

The ideal candidate is a technically deep platform engineer with hands-on expertise in Okta and SailPoint Identity IQ, a strong understanding of enterprise identity protocols, and a demonstrated ability to deliver complex integration solutions in a federal IT environment. This individual must be comfortable operating in a fast-paced, high-volume program where platform reliability, security, and scalability are mission-critical priorities. This position requires an active Secret clearance and may require occasional travel to Government facilities.

Primary work will be performed remotely. The Okta/SailPoint Engineer will serve as the primary platform subject matter expert (SME) for the ICAM technical stack, responsible for the hands-on configuration, administration, troubleshooting, and continuous improvement of the Okta and SailPoint Identity IQ platforms. This individual will work closely with migration engineers, the migration team lead, and application owners to ensure the ICAM technical stack is properly configured, performant, and capable of supporting the full application enablement pipeline.

The Okta/SailPoint Engineer is expected to deliver technically sound, secure, and scalable platform solutions while maintaining rigorous documentation standards and supporting program compliance requirements. Principal responsibilities will include but are not limited to:
* Serve as the primary technical SME for the Okta Identity Provider (IdP) platform, including the administration, configuration, and ongoing optimization of Okta Universal Directory, SSO integrations, MFA policies, application integrations, and identity federation services.
* Serve as the primary technical SME for SailPoint Identity IQ (IIQ), including the administration, configuration, and ongoing optimization of identity governance workflows, automated provisioning and deprovisioning, entitlement management, access certification campaigns, and Segregation of Duties (SOD) enforcement.
* Design, configure, and deploy application integrations with the Okta IdP using industry-standard protocols including SAML, OAuth 2.0, OIDC, and SCIM, leveraging existing Okta connectors and integration frameworks where available.
* Design, configure, and deploy application integrations with SailPoint IIQ, including the setup of application connectors, automated provisioning workflows, role and entitlement models, access request processes, and audit reporting capabilities.
* Engineer and develop custom connectors, scripts, APIs, and middleware solutions to facilitate the integration of legacy applications that cannot natively support modern identity protocols or standard SailPoint/Okta connectors.
* Develop, implement, and sustain the identity protocol connectors and APIs that application owners will use to connect their systems to the ICAM technical stack, ensuring these resources are reliable, well-documented, and accessible.
* Provide deep technical guidance and platform-specific expertise to migration engineers and application owners throughout the enablement lifecycle, including troubleshooting complex integration failures, diagnosing authentication and authorization issues, and resolving platform-level defects.
* Support the configuration and management of alternative credential solutions and non-PKI based authentication mechanisms within the Okta platform as required by individual application enablement needs.
* Administer and maintain Okta Universal Directory as the Authoritative Directory Aggregator, ensuring accurate, consistent, and synchronized identity data across integrated applications and identity sources.
* Implement and enforce access control models including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) configurations within Okta and SailPoint, providing architectural…