ICAM Governance Specialist (Hybrid)

Koniag Government Services, LLC•Washington, DC

2d•$150,000 - $190,000•Hybrid

About The Position

Koniag Operations Services, LLC (KOS), a Koniag Government Services company, is seeking an experienced ICAM Governance Specialist to support enterprise identity and access management operations for a federal government client in Washington, D.C. This hybrid position requires the ability to obtain and maintain a Public Trust. The ICAM Governance Specialist serves as the strategic and operational lead for Identity, Credential, and Access Management (ICAM) governance, change management, and stakeholder communication. The role helps ensure the technology landscape remains aligned with SBA identity lifecycle management workflows, security standards, and agency directives. Working within a DevSecOps delivery model, the specialist connects technical execution with organizational readiness across platforms including ServiceNow, Microsoft Entra, and Okta Identity. The role supports MFA adoption, collaboration across teams, SOP development, testing, and transition strategies for leadership and end users.

Requirements

U.S. citizenship.
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Business Administration, or a related field.
6–10+ years of experience in IT governance, cybersecurity policy, or systems engineering within a federal contracting environment.
At least 3 years of direct experience supporting federal ICAM or Zero Trust Architecture initiatives.
Hands-on familiarity or strong functional understanding of enterprise identity environments using Microsoft Entra (Azure AD) and/or Okta Identity.
Experience with governance, catalog workflows, and user lifecycle automation in ServiceNow.
Deep familiarity with federal ICAM standards, including FIPS 201, NIST SP 800-63, and the FICAM framework.
Familiarity with modern identity controls and MFA standards, including PIV/CAC and FIDO2/WebAuthn.
Familiarity with DevSecOps cultures and methodologies, including integrating security governance into automated development cycles.
Demonstrated experience developing formal project artifacts, including change management plans, communications plans, and SOPs.
Outstanding verbal and written communication skills, including experience briefing executive and senior leadership.
Ability to obtain and maintain a Public Trust.

Nice To Haves

Master’s degree.

Responsibilities

Support the ICAM Lead with technology architectures and Analysis of Alternatives aligned with emerging government mandates, policies, and standards, including Executive Order 14028, OMB Zero Trust memorandums, and NIST SP 800-63.
Support ICAM governance and integration strategy for enterprise identity hubs, including Microsoft Entra and Okta Identity.
Establish governance frameworks integrating identity lifecycle management with IT Service Management workflows in ServiceNow.
Communicate with stakeholders about federal ICAM compliance, technology refreshes, modernization roadmaps, and phishing-resistant MFA frameworks.
Lead ICAM program communications, tailoring messages to senior leadership, technical teams, administrative staff, and end users.
Develop briefings, organizational summaries, and communications plans for senior agency officials to communicate ICAM transition progress.
Facilitate training discussions, workshops, and working groups with SBA teams.
Develop, execute, and maintain ICAM change management, communications, and transition plans to minimize operational friction during enterprise platform rollouts.
Author step-by-step SOPs for administrative and technical staff, including guidance for migrating users and roles from legacy identity stores to Okta and Microsoft Entra.
Oversee change management for user onboarding, offboarding, and access requests routed through ServiceNow automation workflows.
Collaborate within a DevSecOps continuous integration and continuous deployment pipeline to bridge governance and technical execution.
Assist with automated and manual testing of secure identity provisioning and deployment.
Document and review test plans and test summaries to verify that identity features, including conditional access policies and MFA enforcement, meet technical specifications and SBA compliance requirements.