[Hiring] ICAM Controls Subject Matter Expert @Koniag Government Services, LLC

Role Description

Koniag IT Systems, LLC (KITS) is seeking an experienced ICAM Controls Subject Matter Expert (SME) to support the Department of the Air Force (DAF) Identity, Credential, and Access Management (ICAM) Program Management Office (PMO) in a SOC 1 audit-readiness capacity. This position requires the candidate to be able to obtain a Public Trust.

The ICAM Controls SME will evaluate identity governance, role and attribute mapping, Segregation of Duties (SoD), account lifecycle controls, and privileged access evidence in support of the DAF ICAM SOC 1 audit-readiness mission.

• Decompose the joiner, mover, and leaver identity lifecycle into auditable control points, identifying system of record, trigger, workflow, approver, and completion evidence for each step.
• Test timeliness and completeness of provisioning, de-provisioning, periodic user recertification, and orphaned-account detection and remediation.
• Map business processes, user populations, roles, identity attributes, access policies, and entitlements to privileged and non-privileged access governance.
• Document and test the SoD rule set, including preventive and detective controls, exception approvals, and periodic review evidence.
• Coordinate with external PAM organizations to establish evidence for the Master User Record and elevated privileges; reconcile privileged-account inventories to authorized users and roles.
• Review SOC reports from upstream service providers (e.g., Okta, AWS) and assess their impact on the DAF ICAM control boundary.
• Support control traceability matrix (D003) development with technical configuration detail from Okta and SailPoint IdentityIQ platforms.
• Identify anomalies, stale privileges, or manual dependencies and recommend control or workflow improvements for Government consideration.
• Maintain evidence supporting FIAR target metrics without assuming operational ownership of PAM functions assigned to other Government organizations.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field from an accredited college or university.
• 6+ years of experience in identity governance and administration (IGA), IAM engineering, or ICAM controls evaluation.
• Direct configuration or administration experience with Okta Identity Provider (IdP) and SailPoint IdentityIQ.
• DoDM 8140.03 baseline certification appropriate to privileged access roles.

Requirements

• Deep technical knowledge of identity lifecycle management, automated provisioning/de-provisioning, and access recertification workflows.
• Experience with Segregation of Duties (SoD) rule design, testing, and exception remediation.
• Familiarity with privileged access management (PAM) concepts, including CyberArk or comparable platforms.
• Ability to translate technical system configurations into control narratives and audit evidence suitable for IPA review.
• Strong collaboration skills to work with PAM, O&S, and enablement organizations without assuming operational control ownership.

Benefits

• Medical, dental, and vision insurance
• 401(k) retirement plan
• Paid time off
• Paid parental leave
• Life and disability insurance
• Flexible spending accounts
• Commuter benefits
• Tuition reimbursement