Okta ICAM Engineer

Concept Plus
United States
3 days ago
Apply on ats.rippling.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Compensation
$106,000.0 - $160,000.0
Working hours
Regular working hours

Tech stack

Active Directory Application Programming Interfaces (APIs) Artificial Intelligence Authentication Protocols Build Automation Microsoft Azure Bash Shell Cloud Computing Cloud Engineering Cyber Security Identity and Access Management Python (Programming Language)
+10 more
OAuth OpenID Public Key Infrastructure Windows PowerShell Role-Based Access Control Azure Active Directory Zero Trust Network Access Security Assertion Markup Language (SAML) Scripting Okta

Job description

Concept Plus is seeking an Okta ICAM Engineer to support client ICAM modernization initiatives. This role focuses on integrating and optimizing identity solutions within environments that utilize client credentials, federation services, and Zero Trust architecture aligned with federal standards, including NIST SP 800 63, OMB ICAM guidelines, and client identity directives.

What you’ll do

  • Design, implement, and maintain ICAM solutions using Okta Identity Cloud in support of federal identity requirements, including Workforce Identity, SSO, MFA, and adaptive authentication.
  • Integrate Okta with client credential systems, including certificate-based authentication, PKI validation, and federation with government identity providers.
  • Configure and support identity federation using SAML, OIDC, and OAuth across government applications, platforms, and on-prem enterprise systems.
  • Develop and manage identity lifecycle processes aligned with federal access control policies, RBAC/ABAC models, and authoritative identity sources.
  • Implement Zero Trust identity pillars, including strong authentication, device trust, continuous validation, and least-privilege access principles.
  • Build automation and identity workflows using Okta Workflows, APIs, and scripting tools to support compliance and operational efficiency.
  • Troubleshoot identity-related issues across client authentication flows, PKI chains, SSO integrations, and SCIM provisioning.
  • Ensure compliance with NIST 800 63, FICAM architecture standards, DoD IdAM policies, and FedRAMP security controls where required.
  • Collaborate closely with cybersecurity, cloud engineering, and system owners to support secure identity integration for mission systems.
  • Contribute to ICAM modernization roadmaps, ATO support documentation, and continuous improvements in identity posture.., Remote or Hybrid Mid level Mid level Cloud * Fintech * Software * Business Intelligence * Consulting * Financial Services Manage client teams in healthcare, oversee financial reporting, provide operational improvements, and coach staff. Requires strong finance background and leadership skills. Top Skills: Bill.ComIntaactMicrosoft Office SuiteNetSuiteQuickbooks Online

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

  • Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
  • Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
  • Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
  • Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
  • Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

Requirements

  • US Citizen
  • 5-8+ years of experience in ICAM/IAM engineering within federal or government environments.
  • 3-5+ years of hands-on experience with Okta Identity Cloud (administration, integration, federation).
  • Practical experience supporting PIV/CAC-based authentication, PKI trust chains, certificate mapping, and federation with federal IdPs.
  • Strong understanding of authentication protocols (SAML, OIDC, OAuth), SCIM provisioning, and directory services (Active Directory, Azure AD).
  • Experience with identity policy, RBAC/ABAC, account lifecycle management, and enterprise identity governance.
  • Hands-on experience with automation (PowerShell, Python, or Bash).
  • Familiarity with Zero Trust identity architecture, especially in federal or DoD environments.
  • Excellent documentation, communication, and collaboration skills.

Preferred Qualifications

  • Experience supporting ICAM modernization initiatives in federal agencies or DoW environments.
  • Okta Professional or Consultant Certification.
  • Familiarity with NIST SP 800 63, NIST CSF, OMB ICAM guidance, DoD Zero Trust Strategy, and FedRAMP controls.
  • Experience integrating identity services with Azure Government, or on-prem mission systems.

Benefits & conditions

We offer competitive pay, comprehensive health, dental, and vision insurance, paid life insurance, paid time off, 11 paid holidays, performance bonuses, tuition reimbursement, unlimited training, and the opportunity to thrive in a collaborative, flexible, and innovative environment., 6 Minutes Ago Remote or Hybrid 106K-160K Annually Senior level 106K-160K Annually Senior level Cloud * Fintech * Software * Business Intelligence * Consulting * Financial Services Manage tax compliance engagements, maintain client relationships, review tax documents, provide training and supervision, and ensure professional standards are met. Top Skills: AccountingCpaTax Compliance Wipfli

Manager, Accounting Advisory - Skilled Nursing Industry Clients

6 Minutes Ago Remote or Hybrid 109K-147K Annually Mid level 109K-147K Annually Mid level Cloud * Fintech * Software * Business Intelligence * Consulting * Financial Services Manage accounting advisory services for skilled nursing clients, provide financial insights, support budgeting and forecasting, mentor teams, and ensure high-quality reporting. Top Skills: Bill.ComIntaactMicrosoft Office SuiteNetSuiteQuickbooks Online Wipfli

About the company

Senior level Designs, implements, and maintains Okta-based ICAM solutions for federal environments. Integrates PIV/CAC, PKI, federation, SAML, OIDC, OAuth, SCIM, and directory services. Manages identity lifecycles, RBAC/ABAC, Zero Trust controls, automation, authentication troubleshooting, compliance, ATO documentation, and modernization roadmaps while collaborating with cybersecurity and cloud engineering teams. The summary above was generated by AI

About Concept Plus Concept Plus is a mission-focused technology solutions provider that transforms IT concepts into impactful solutions for federal agencies. Headquartered in Fairfax, VA, we bring the agility, responsiveness, and customer intimacy of a small business combined with the quality and infrastructure of a larger firm.

Recognized as an award-winning Oracle partner, we have delivered innovative solutions across Defense, Intelligence, Civilian, Health IT, and Tribal sectors. Our highly certified experts build systems that drive efficiency, accelerate modernization, and ensure mission outcomes with certainty.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on ats.rippling.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:24 min

Securing cloud deployments by utilizing OpenID Connect mapping

Chris Ayers · LIVE

4:35 min

Setting up passwordless federated identity configuring OpenID Connect patterns

Marcel Lupo · LIVE

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann +2 · LIVE

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · World Congress 2026 Europe

2:22 min

Adapting OpenID Connect for decentralized data sharing

Adam Larter Adam Larter · World Congress 2024

2:52 min

Implementing IAM with Keycloak and OpenID Connect

Thomas Südbröcker · LIVE

Videos

See all

Related articles

See all