Jr. ICAM

Koniag Government Services, LLC•Washington, DC

21h•$135,000 - $159,060•Onsite

About The Position

Koniag Data Solutions (KDS), a Koniag Government Services company, is seeking a motivated and detail-oriented Junior ICAM Specialist to support the implementation and management of Identity, Credential, and Access Management (ICAM) programs and capabilities for the U.S. Small Business Administration (SBA). This entry to mid-level role requires a foundational understanding of federal ICAM frameworks, identity management technologies, and access management principles. The ICAM Specialist will play a supporting role in SBA's ICAM program, assisting in the implementation, operation, and maintenance of ICAM capabilities across SBA's enterprise IT environment under the guidance of senior ICAM staff and SBA security leadership. The position requires the candidate to be able to obtain a Public Trust clearance.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field from an accredited college or university, OR equivalent combination of education and relevant work experience.
1-3 years of experience in information technology or cybersecurity, with some demonstrated exposure to or experience with identity and access management concepts, tools, or processes.
Foundational familiarity with identity and access management principles including user provisioning, access control, authentication, and authorization concepts.
One or more of the following certifications: CompTIA Security+, Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), or equivalent entry-level cybersecurity or identity management certification.
Ability to obtain and maintain a Public Trust clearance as required by the SBA.
Foundational knowledge of identity and access management principles and concepts including user lifecycle management, authentication, authorization, role-based access control, and the principle of least privilege.
Basic familiarity with identity and access management technologies including directory services such as Active Directory and Azure AD/Entra ID, MFA solutions, and SSO platforms.
Basic understanding of federal ICAM frameworks and requirements including FICAM architecture, NIST SP 800-63, HSPD-12, and FIPS 201 at a conceptual level, with a willingness and ability to develop deeper expertise over time.
Ability to assist in the administration and maintenance of ICAM platforms and tools under the guidance of senior staff, demonstrating attention to detail and a commitment to accuracy.
Effective written and oral communication skills in English, with the ability to clearly document ICAM processes, assist in developing technical artifacts, and communicate effectively with both technical and non-technical stakeholders.
Basic understanding of cybersecurity principles and their relationship to identity and access management, including concepts such as least privilege, separation of duties, and zero trust.
Strong organizational skills with the ability to track multiple tasks and assignments simultaneously while meeting deadlines and maintaining high-quality work products.
Ability to work effectively in a team environment under the guidance of senior ICAM staff and security leadership, demonstrating a willingness to learn, grow professionally, and take on increasing responsibilities over time.
Basic familiarity with helpdesk and ticketing processes and the ability to provide timely and accurate support to users experiencing identity and access management issues.

Nice To Haves

Associate's or Bachelor's degree in Cybersecurity, Information Technology, or a related field.
Prior internship, academic project experience, or entry-level work experience related to identity and access management, directory services administration, or federal ICAM programs.
Microsoft Certified: Identity and Access Administrator Associate or active pursuit of same.
Prior experience or academic exposure to identity and access management, directory services administration, or federal ICAM programs, preferably in support of a federal government agency or the SBA.
Basic familiarity with privileged access management (PAM) concepts and tools such as CyberArk, BeyondTrust, or Delinea.
Foundational knowledge of cloud identity and access management concepts and familiarity with cloud platforms such as Microsoft Azure, AWS, or Google Cloud Platform and their native identity and access management capabilities.
Basic familiarity with identity federation concepts and protocols including SAML, OAuth2, and OpenID Connect and their application to SSO and cross-system authentication scenarios.
Familiarity with the PIV credential lifecycle and the processes associated with PIV enrollment, issuance, and maintenance in a federal agency environment.
Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), or other relevant identity management certifications or active pursuit of same.
CompTIA CySA+, GIAC Security Essentials (GSEC), or other relevant entry to mid-level cybersecurity certifications.
Basic scripting skills in PowerShell or similar languages to support directory services administration, user provisioning automation, and other routine ICAM operational tasks.
Strong desire and demonstrated ability to learn new technologies, frameworks, and identity management concepts in support of professional growth within the federal ICAM field.
Familiarity with Governance, Risk, and Compliance (GRC) concepts and their relationship to identity and access management program requirements and compliance activities.

Responsibilities

Support the day-to-day administration and operation of SBA's ICAM platforms and tools including identity providers, multi-factor authentication (MFA) solutions, privileged access management (PAM) tools, single sign-on (SSO) platforms, and directory services under the guidance of senior ICAM staff.
Assist in the implementation and maintenance of identity lifecycle management processes including user provisioning, deprovisioning, and access recertification activities in accordance with SBA policies and federal ICAM requirements.
Support the administration and maintenance of role-based access control (RBAC) and attribute-based access control (ABAC) configurations across SBA systems and applications, ensuring access permissions are properly assigned and maintained in accordance with the principle of least privilege.
Assist in the implementation and management of SBA's multi-factor authentication (MFA) program, supporting the enrollment, configuration, and troubleshooting of MFA solutions for SBA personnel and contractors.
Support the administration and management of SBA's Personal Identity Verification (PIV) credential program, assisting with PIV enrollment, issuance, maintenance, and troubleshooting activities in accordance with HSPD-12, FIPS 201, and applicable NIST guidelines.
Assist in the configuration and maintenance of single sign-on (SSO) integrations between SBA's identity provider and connected applications and systems, supporting the resolution of SSO-related issues under senior guidance.
Support the administration of directory services including Active Directory and Azure AD/Entra ID, assisting with user account management, group management, and directory synchronization activities.
Assist in the implementation and management of privileged access management (PAM) capabilities, supporting the onboarding of privileged accounts, configuration of PAM policies, and monitoring of privileged access activities.
Support access review and certification activities, assisting in the coordination and tracking of periodic access reviews to ensure user access rights remain appropriate and aligned with job responsibilities and the principle of least privilege.
Assist in the development and maintenance of ICAM-related documentation including standard operating procedures (SOPs), user guides, configuration documentation, and other technical artifacts under the guidance of senior ICAM staff.
Support the monitoring and analysis of ICAM platform logs and alerts, identifying potential access anomalies, policy violations, or security issues and escalating findings to senior ICAM staff as appropriate.
Participate in ICAM-related projects and initiatives, providing implementation support, testing assistance, and documentation support under the direction of senior ICAM specialists and project managers.
Assist in coordinating with SBA IT, security, and application teams to support the integration of ICAM capabilities into SBA systems and applications, ensuring consistent and effective identity and access management across the enterprise.
Support the resolution of ICAM-related helpdesk tickets and user issues, providing timely and accurate assistance to SBA personnel and contractors experiencing identity and access management issues.
Stay current on federal ICAM requirements, technology updates, and best practices, applying this knowledge to support the continuous improvement of SBA's ICAM capabilities under the guidance of senior staff.