The posting
This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible. Koniag Operations Services, LLC (KOS), a Koniag Government Services company, is seeking a Junior ICAM to support KOS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust. Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits, and tuition reimbursement. We are seeking a motivated and detail-oriented Identity, Credential, and Access Management (ICAM) Specialist to support the implementation and management of ICAM programs and capabilities in support of the U.S. Small Business Administration (SBA). The ideal candidate is an entry to mid-level identity and access management professional with a foundational understanding of federal ICAM frameworks, identity management technologies, and access management principles. This individual will play an important supporting role in SBA's ICAM program, assisting in the implementation, operation, and maintenance of ICAM capabilities across SBA's enterprise IT environment under the guidance of senior ICAM staff and SBA security leadership. The ICAM Specialist will support the day-to-day implementation, operation, and maintenance of ICAM capabilities for the SBA, working under the guidance of senior ICAM specialists and SBA security leadership to ensure SBA's identity and access management capabilities are properly configured, maintained, and aligned with federal ICAM requirements and SBA security policies. Principal responsibilities will include but are not limited to:
Support the day-to-day administration and operation of SBA's ICAM platforms and tools including identity providers, multi-factor authentication (MFA) solutions, privileged access management (PAM) tools, single sign-on (SSO) platforms, and directory services under the guidance of senior ICAM staff. Assist in the implementation and maintenance of identity lifecycle management processes including user provisioning, deprovisioning, and access recertification activities in accordance with SBA policies and federal ICAM requirements Support the administration and maintenance of role-based access control (RBAC) and attribute-based access control (ABAC) configurations across SBA systems and applications, ensuring access permissions are properly assigned and maintained in accordance with the principle of least privilege. Assist in the implementation and management of SBA's multi-factor authentication (MFA) program, supporting the enrollment, configuration, and troubleshooting of MFA solutions for SBA personnel and contractors. Support the administration and management of SBA's Personal Identity Verification (PIV) credential program, assisting with PIV enrollment, issuance, maintenance, and troubleshooting activities in accordance with HSPD-12, FIPS 201, and applicable NIST guidelines. Assist in the configuration and maintenance of single sign-on (SSO) integrations between SBA's identity provider and connected applications and systems, supporting the resolution of SSO-related issues under senior guidance. Support the administration of directory services including Active Directory and Azure AD/Entra ID, assisting with user account management, group management, and directory synchronization activities. Assist in the implementation and management of privileged access management (PAM) capabilities, supporting the onboarding of privileged accounts, configuration of PAM policies, and monitoring of privileged access activities. Support access review and certification activities, assisting in the coordination and tracking of periodic access reviews to ensure user access rights remain appropriate and aligned with job responsibilities and the principle of least privileg Assist in the development and maintenance of ICAM-related documentation including standard operating procedures (SOPs), user guides, configuration documentation, and other technical artifacts under the guidance of senior ICAM staff Support the monitoring and analysis of ICAM platform logs and alerts, identifying potential access anomalies, policy violations, or security issues and escalating findings to senior ICAM staff as appropriate. Participate in ICAM-related projects and initiatives, providing implementation support, testing assistance, and documentation support under the direction of senior ICAM specialists and project managers. Assist in coordinating with SBA IT, security, and application teams to support the integration of ICAM capabilities into SBA systems and applications, ensuring consistent and effective identity and access management across the enterprise Support the resolution of ICAM-related helpdesk tickets and user issues, providing timely and accurate assistance to SBA personnel and contractors experiencing identity and access management issues Stay current on federal ICAM requirements, technology updates, and best practices, applying this knowledge to support the continuous improvement of SBA's ICAM capabilities under the guidance of senior staff.
Education and Experience: Required:
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field from an accredited college or university, OR equivalent combination of education and relevant work experience. 1-3 years of experience in information technology or cybersecurity, with some demonstrated exposure to or experience with identity and access management concepts, tools, or processes. Foundational familiarity with identity and access management principles including user provisioning, access control, authentication, and authorization concepts. One or more of the following certifications: CompTIA Security+, Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), or equivalent entry-level cybersecurity or identity management certification.
Desired:
Associate's or Bachelor's degree in Cybersecurity, Information Technology, or a related field. Prior internship, academic project experience, or entry-level work experience related to identity and access management, directory services administration, or federal ICAM programs. Microsoft Certified: Identity and Access Administrator Associate or active pursuit of same.
Required Skills and Competencies:
Foundational knowledge of identity and access management principles and concepts including user lifecycle management, authentication, authorization, role-based access control, and the principle of least privilege. Basic familiarity with identity and access management technologies including directory services such as Active Directory and Azure AD/Entra ID, MFA solutions, and SSO platforms. Basic understanding of federal ICAM frameworks and requirements including FICAM architecture, NIST SP 800-63, HSPD-12, and FIPS 201 at a conceptual level, with a willingness and ability to develop deeper expertise over time. Ability to assist in the administration and maintenance of ICAM platforms and tools under the guidance of senior staff, demonstrating attention to detail and a commitment to accuracy. Effective written and oral communication skills in English, with the ability to clearly document ICAM processes, assist in developing technical artifacts, and communicate effectively with both technical and non-technical stakeholders Basic understanding of cybersecurity principles and their relationship to identity and access management, including concepts such as least privilege, separation of duties, and zero trust. Strong organizational skills with the ability to track multiple tasks and assignments simultaneously while meeting deadlines and maintaining high-quality work products. Ability to work effectively in a team environment under the guidance of senior ICAM staff and security leadership, demonstrating a willingness to learn, grow professionally, and take on increasing responsibilities over time. Basic familiarity with helpdesk and ticketing processes and the ability to provide timely and accurate support to users experiencing identity and access management issues. Ability to obtain and maintain a Public Trust clearance as required by the SBA.
Desired Skills and Competencies:
Prior experience or academic exposure to identity and access management, directory services administration, or federal ICAM programs, preferably in support of a federal government agency or the SBA. Basic familiarity with privileged access management (PAM) concepts and tools such as CyberArk, BeyondTrust, or Delinea. Foundational knowledge of cloud identity and access management concepts and familiarity with cloud platforms such as Microsoft Azure, AWS, or Google Cloud Platform and their native identity and access management capabilities. Basic familiarity with identity federation concepts and protocols including SAML, OAuth2, and OpenID Connect and their application to SSO and cross-system authentication scenarios. Familiarity with the PIV credential lifecycle and the processes associated with PIV enrollment, issuance, and maintenance in a federal agency environment. Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), or other relevant identity management certifications or active pursuit of same. CompTIA CySA+, GIAC Security Essentials (GSEC), or other relevant entry to mid-level cybersecurity certifications. Basic scripting skills in PowerShell or similar languages to support directory services administration, user provisioning automation, and other routine ICAM operational tasks. Strong desire and demonstrated ability to learn new technologies, frameworks, and identity management concepts in support of professional growth within the federal ICAM field. Familiarity with Governance, Risk, and Compliance (GRC) concepts and their relationship to identity and access management program requirements and compliance activities.
Our Equal Employment Opportunity Policy The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment. The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at [email protected] or by calling 703-488-9377 to request accommodations. Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com. Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352
