Jr. ICAM

Koniag Government Services•Washington, DC

4d•Onsite

About The Position

Koniag Data Solutions, a Koniag Government Services company, is seeking a motivated and detail-oriented Identity, Credential, and Access Management (ICAM) Specialist to support the implementation and management of ICAM programs and capabilities in support of the U.S. Small Business Administration (SBA). The ideal candidate is an entry to mid-level identity and access management professional with a foundational understanding of federal ICAM frameworks, identity management technologies, and access management principles. This individual will play an important supporting role in SBA's ICAM program, assisting in the implementation, operation, and maintenance of ICAM capabilities across SBA's enterprise IT environment under the guidance of senior ICAM staff and SBA security leadership. The ICAM Specialist will support the day-to-day implementation, operation, and maintenance of ICAM capabilities for the SBA, working under the guidance of senior ICAM specialists and SBA security leadership to ensure SBA's identity and access management capabilities are properly configured, maintained, and aligned with federal ICAM requirements and SBA security policies.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field from an accredited college or university, OR equivalent combination of education and relevant work experience.
1-3 years of experience in information technology or cybersecurity, with some demonstrated exposure to or experience with identity and access management concepts, tools, or processes.
Foundational familiarity with identity and access management principles including user provisioning, access control, authentication, and authorization concepts.
One or more of the following certifications: CompTIA Security+, Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), or equivalent entry-level cybersecurity or identity management certification.
Ability to obtain and maintain a Public Trust clearance as required by the SBA.

Nice To Haves

Associate's or Bachelor's degree in Cybersecurity, Information Technology, or a related field.
Prior internship, academic project experience, or entry-level work experience related to identity and access management, directory services administration, or federal ICAM programs.
Microsoft Certified: Identity and Access Administrator Associate or active pursuit of same.
Prior experience or academic exposure to identity and access management, directory services administration, or federal ICAM programs, preferably in support of a federal government agency or the SBA.
Basic familiarity with privileged access management (PAM) concepts and tools such as CyberArk, BeyondTrust, or Delinea.
Foundational knowledge of cloud identity and access management concepts and familiarity with cloud platforms such as Microsoft Azure, AWS, or Google Cloud Platform and their native identity and access management capabilities.
Basic familiarity with identity federation concepts and protocols including SAML, OAuth2, and OpenID Connect and their application to SSO and cross-system authentication scenarios.
Familiarity with the PIV credential lifecycle and the processes associated with PIV enrollment, issuance, and maintenance in a federal agency environment.
Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), or other relevant identity management certifications or active pursuit of same.
CompTIA CySA+, GIAC Security Essentials (GSEC), or other relevant entry to mid-level cybersecurity certifications.
Basic scripting skills in PowerShell or similar languages to support directory services administration, user provisioning automation, and other routine ICAM operational tasks.
Strong desire and demonstrated ability to learn new technologies, frameworks, and identity management concepts in support of professional growth within the federal ICAM field.
Familiarity with Governance, Risk, and Compliance (GRC) concepts and their relationship to identity and access management program requirements and compliance activities.

Responsibilities

Support the day-to-day administration and operation of SBA's ICAM platforms and tools including identity providers, multi-factor authentication (MFA) solutions, privileged access management (PAM) tools, single sign-on (SSO) platforms, and directory services under the guidance of senior ICAM staff.
Assist in the implementation and maintenance of identity lifecycle management processes including user provisioning, deprovisioning, and access recertification activities in accordance with SBA policies and federal ICAM requirements.
Support the administration and maintenance of role-based access control (RBAC) and attribute-based access control (ABAC) configurations across SBA systems and applications, ensuring access permissions are properly assigned and maintained in accordance with the principle of least privilege.
Assist in the implementation and management of SBA's multi-factor authentication (MFA) program, supporting the enrollment, configuration, and troubleshooting of MFA solutions for SBA personnel and contractors.
Support the administration and management of SBA's Personal Identity Verification (PIV) credential program, assisting with PIV enrollment, issuance, maintenance, and troubleshooting activities in accordance with HSPD-12, FIPS 201, and applicable NIST guidelines.
Assist in the configuration and maintenance of single sign-on (SSO) integrations between SBA's identity provider and connected applications and systems, supporting the resolution of SSO-related issues under senior guidance.
Support the administration of directory services including Active Directory and Azure AD/Entra ID, assisting with user account management, group management, and directory synchronization activities.
Assist in the implementation and management of privileged access management (PAM) capabilities, supporting the onboarding of privileged accounts, configuration of PAM policies, and monitoring of privileged access activities.
Support access review and certification activities, assisting in the coordination and tracking of periodic access reviews to ensure user access rights remain appropriate and aligned with job responsibilities and the principle of least privilege.
Assist in the development and maintenance of ICAM-related documentation including standard operating procedures (SOPs), user guides, configuration documentation, and other technical artifacts under the guidance of senior ICAM staff.
Support the monitoring and analysis of ICAM platform logs and alerts, identifying potential access anomalies, policy violations, or security issues and escalating findings to senior ICAM staff as appropriate.
Participate in ICAM-related projects and initiatives, providing implementation support, testing assistance, and documentation support under the direction of senior ICAM specialists and project managers.
Assist in coordinating with SBA IT, security, and application teams to support the integration of ICAM capabilities into SBA systems and applications, ensuring consistent and effective identity and access management across the enterprise.
Support the resolution of ICAM-related helpdesk tickets and user issues, providing timely and accurate assistance to SBA personnel and contractors experiencing identity and access management issues.
Stay current on federal ICAM requirements, technology updates, and best practices, applying this knowledge to support the continuous improvement of SBA's ICAM capabilities under the guidance of senior staff.