Migration Engineer (REMOTE)

Koniag Government Services•Chantilly, VA

21h•Remote

About The Position

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced Migration Engineer to support a critical Government Identity, Credential, and Access Management (ICAM) initiative. This role supports a large-scale Application and Systems Enablement effort issued under an ICAM Enterprise Master IDIQ Contract. The Migration Engineer will serve as a hands-on technical contributor responsible for executing the integration and onboarding of NIPRNet applications onto a centralized ICAM technical stack—leveraging Okta for Identity Provider (IdP) services and SailPoint IdentityIQ (IIQ) for Identity Governance and Administration (IGA)—in direct support of the Department of Defense (DoD) Zero Trust Execution Roadmap. The ideal candidate is a technically skilled engineer with practical experience in identity and access management technologies, application integration, and enterprise security protocols. This individual must be comfortable working directly with application owners, troubleshooting complex integration challenges, and delivering high-quality technical solutions in a fast-paced federal IT environment. This position requires an active Secret clearance and may require occasional travel to Government facilities. Primary work will be performed remotely. The Migration Engineer will serve as a primary technical contributor on the enablement team, responsible for the hands-on execution of application integration activities across the full enablement lifecycle. This individual will work directly with application owners and internal technical teams to assess, configure, troubleshoot, and validate the integration of assigned applications into the Government ICAM ecosystem. The Migration Engineer is expected to deliver technically sound, secure, and compliant integration solutions while maintaining accurate documentation and status reporting throughout the enablement process.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field from an accredited college or university.
Minimum of 4 years of hands-on experience in information technology, with at least 2 years of direct experience in identity and access management, enterprise application integration, or related cybersecurity disciplines.
Demonstrated experience configuring and troubleshooting SSO integrations using SAML, OAuth 2.0, or OIDC in an enterprise environment.
Experience working with Identity Provider (IdP) or Identity Governance and Administration (IGA) platforms in a technical integration capacity.
Active Secret clearance.
Must be able to satisfy requirements for CAC-card issuance and NIPRNet access, including annual DoD CyberAwareness training and certification.
Strong technical communication skills in English—both written and oral—with the ability to clearly explain complex integration concepts to both technical engineers and non-technical application owners.
Hands-on experience configuring Okta for SSO, MFA, and application integration, including working with Okta application integrations, Universal Directory, and identity federation.
Hands-on experience with SailPoint IdentityIQ (IIQ), including connector configuration, automated provisioning and deprovisioning workflows, entitlement management, and access certification.
Working knowledge and practical implementation experience with SAML, OAuth 2.0, OIDC, and SCIM identity protocols.
Experience developing custom integration solutions including scripts, connectors, APIs, or middleware to bridge legacy applications with modern identity platforms.
Familiarity with Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) design and implementation principles.
Experience supporting or conducting User Acceptance Testing (UAT), including test case development, defect tracking, and resolution support.
Ability to accurately assess application integration readiness, identify technical gaps, and document findings in a structured and auditable manner.
Strong attention to detail with the ability to maintain accurate, real-time documentation across multiple concurrent application enablement efforts.
Familiarity with DoD security requirements, including CUI handling, OPSEC, DFARS 252.204-7012, and DoDM 8140.03 cybersecurity certification requirements.
Ability to work effectively both independently and as part of a collaborative cross-functional team under the direction of a technical lead.
Proficiency with Microsoft Office Suite and collaboration tools such as Microsoft Teams.
Ability to obtain and maintain required DoD cybersecurity certifications per DoDM 8140.03 (e.g., Security+ for IAT II or equivalent).

Nice To Haves

Prior experience supporting DoD IT programs, particularly within an ICAM or Zero Trust context.
Experience working in a federal government IT contracting environment.
Hands-on experience with Okta and/or SailPoint IdentityIQ (IIQ) in a production enterprise environment.
Okta Certified Professional, Okta Certified Administrator, or equivalent Okta platform certification.
SailPoint IdentityIQ (IIQ) certification or demonstrated advanced proficiency with the SailPoint platform.
Experience implementing Segregation of Duties (SOD) enforcement and audit reporting within an IGA platform.
Knowledge of Single Sign-On (SSO) troubleshooting methodologies, including the ability to interpret SAML assertions, OAuth token flows, and OIDC authentication responses.
Experience developing and maintaining technical documentation including integration guides, architecture diagrams, and standard operating procedures in a federal contracting environment.
Familiarity with Zero Trust Architecture (ZTA) principles and their application to identity and access management within a DoD context.
Experience with enterprise application portfolio migrations or large-scale IT modernization efforts.
Knowledge of automated provisioning workflows and SCIM-based directory synchronization in an enterprise environment.
Certified Information Systems Security Professional (CISSP), CompTIA Security+, or related cybersecurity certification.
Familiarity with Section 508 compliance requirements for electronic and information technology.
Experience with CDRL deliverable development and contribution in a federal contracting environment.
Familiarity with Agile and/or hybrid Agile-Waterfall program execution methodologies.
Experience providing white glove technical support to non-technical end users or application owners navigating complex IT integration processes.

Responsibilities

Execute the technical integration of assigned NIPRNet applications into the ICAM technical stack, establishing logical network connections that route 100% of user authentication requests through the Okta IdP and 100% of user access management through SailPoint IGA in production environments.
Conduct thorough technical triage of assigned applications, assessing each application's current identity state, identifying integration gaps, documenting risks, and determining the appropriate enablement pathway—self-service, automated, or dedicated white glove support.
Configure and implement identity federation and SSO integrations using industry-standard protocols including SAML, OAuth 2.0, OIDC, and SCIM, leveraging existing Okta and SailPoint connectors where available.
Engineer, develop, and deploy custom tools, scripts, connectors, and middleware solutions to facilitate the integration of legacy applications that cannot natively support modern identity protocols.
Provide technical advisement and architectural guidance to Application Owners on configuring their applications to use the ICAM platform for authentication and authorization, including recommendations for implementing Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC).
Assist Application Owners throughout the full enablement lifecycle, including application registration, credential issuance, non-PKI credential configuration, enrollment workflow setup, and access control module redesign.
Support Application Owners through the User Acceptance Testing (UAT) process, including providing sample code for common integration patterns, reusable libraries or middleware, troubleshooting integration defects, and assisting with defect resolution activities.
Accurately document all triage findings, integration configurations, risk items, engagement activities, and application status updates in the Enablement Tracking Database, ensuring real-time accuracy and completeness.
Follow and execute the Application Owner Escalation Matrix, documenting all engagement attempts with application owners and escalating stalled or non-responsive cases to the Migration Team Lead per established timelines and protocols.
Collaborate with internal engineers, integration specialists, and the Migration Team Lead to resolve complex technical challenges and share reusable integration solutions across the application portfolio.
Contribute to the development and continuous refinement of enablement playbooks, integration guides, standard operating procedures, and technical documentation to support consistent and repeatable onboarding processes.
Generate and maintain technical documentation describing integration solutions, configurations, and architectural decisions for each assigned application.
Support the testing program by assisting in the development of test plans, executing integration testing, and preparing software test reports and observations for UAT events.
Ensure all integration activities and developed solutions comply with applicable DoD security requirements, including CUI handling, OPSEC, Section 508 accessibility standards, and DoD cybersecurity certification requirements.
Maintain awareness of evolving ICAM platform capabilities, identity protocols, and Zero Trust requirements, continuously applying updated knowledge to improve integration quality and program outcomes.