Security/Compliance SME (REMOTE)

Koniag IT Systems, LLC a Koniag Government Services company, is seeking an experienced Security / Compliance Subject Matter Expert (SME) to support the Department of the Air Force (DAF) in advancing its enterprise Identity, Credential, and Access Management (ICAM) capabilities. This position will provide dedicated cybersecurity, compliance, and policy expertise across three concurrent System Enhancement Studies under Task Order 0003, covering Contested, Degraded, and Operationally Limited (CDO-L) ICAM environments, Non-Person Entity (NPE) Governance and Management, and the DAF365 Joiner, Mover, Leaver (JML) Transformation Framework. The ideal candidate is a seasoned cybersecurity and compliance professional with deep knowledge of DoD and DAF security policy frameworks, Zero Trust Architecture, and Defense ICAM compliance requirements who can ensure that all study architectural recommendations, governance frameworks, and implementation roadmaps are grounded in current regulatory requirements and defensible against Government security review.

*Note, this is study is for 120 days. All personnel assigned to this effort must hold a final Secret security clearance.

The Security / Compliance SME will serve as the primary authority on cybersecurity policy, regulatory compliance, and security architecture alignment across all three studies within the DAF ICAM System Enhancement Studies effort. Working in close coordination with the Program Manager, Study Lead Engineers, and Identity Architects, the Security / Compliance SME will ensure that every architectural recommendation, governance workflow, and implementation roadmap produced across the three studies is fully aligned with applicable DoD, DAF, and Federal security mandates, Zero Trust requirements, and audit standards. The Security / Compliance SME will contribute substantive compliance and security content to each study’s Technical Study Report and will serve as the authoritative reference point for all policy interpretation questions arising during the study period.

Principal responsibilities will include but are not limited to:

• Serve as the authoritative policy and compliance reference across all three System Enhancement Studies, ensuring study outputs are aligned with applicable DoD, DAF, and Federal cybersecurity and identity management mandates throughout the study period.
• Review and interpret all applicable Government-Furnished Information (GFI) and regulatory references relevant to the studies, including NIST SP 800-63 (IAL, AAL, AMR), DoDI 8520.04, DoDI 8510.01, CJCSI 6510.01 audit standards, DAFMAN 17-1304, DAFGM2025-01, DoD/DoW X.509 Certificate Policy, and the DoD Zero Trust Reference Architecture.
• Provide security and compliance guidance to the CDO-L Study Lead Engineer to ensure the CDO-L edge identity architecture, disconnected operational procedures, break-glass access controls, PKI certificate validation approaches, and synchronization methodologies are fully aligned with DoD Zero Trust requirements and applicable classification-level security controls.
• Assess and document security posture management requirements for CDO-L edge node operations, including how endpoint security telemetry integrates with the identity layer and how autonomous access revocation can be enforced in the absence of enterprise policy directives, in alignment with DAF Zero Trust continuous verification requirements.
• Evaluate and document the Authority to Operate (ATO) implications of proposed CDO-L edge components, including accreditation requirements for new edge compute platforms operating in classified NIPRNet and SIPRNet environments, and provide realistic Government review and accreditation timeline inputs for the CDO-L implementation roadmap.
• Provide security and compliance guidance to the NPE Governance Study Lead Engineer to ensure proposed NPE attribute schemas, governance workflows, credential management policies, and target architecture are fully aligned with DoD PKI policy, NIST SP 800-63, DoDI 8520.04, and DAF ICAM governance mandates.
• Review and validate proposed NPE credential management governance rules, including PKI certificate and token-based authentication transition requirements, 90-day credential rotation enforcement, enterprise secret vault storage mandates, and hardcoded credential prohibition controls, against applicable DoD and DAF policy requirements.
• Assess Zero Trust Architecture alignment of the proposed NPE governance framework, including workload identity integration within the DoD ZTA framework, dynamic access control via Policy Decision Points (PDPs), and continuous authentication requirements for non-person entity populations.
• Define compliance requirements for NPE audit logging and monitoring, including integration of NPE activity logs with the Security Operations Center (SOC) and Enterprise Log Information, Coordinated Security, and Audit Repository (ELICSAR), and application of UEBA/AI-driven anomaly detection in alignment with CJCSI 6510.01 audit standards.
• Provide security and compliance guidance to the JML Transformation Framework Study Lead Engineer to ensure proposed attribute sanitization workflows, direct Microsoft Entra ID integration architecture, JML event-driven group management workflows, and base-level administrator delegation frameworks are aligned with DAF ICAM policy, Zero Trust continuous verification requirements, and applicable data handling standards.
• Review and validate the Leaver revocation architecture against DoD data retention policy requirements, including automated mailbox handling procedures, DAF365 license reclamation, Entra ID session token revocation, and Okta identity disablement sequencing, to ensure the architecture eliminates the window of exposure between member separation and full digital access revocation.
• Assess delegated provisioning frameworks for base-level administrators against applicable least-privilege, separation of duties, and audit trail requirements, ensuring that delegated provisioning capabilities are scoped appropriately and that all administrator actions are fully auditable.
• Conduct cross-study compliance gap analysis to identify areas where proposed architectures or governance frameworks require additional security controls, policy waivers, or ATO actions prior to implementation.
• Contribute compliance and security policy sections to all three Technical Study Reports, ensuring each report includes a clear regulatory compliance mapping that allows Government security reviewers to confirm alignment without extensive cross-referencing.
• Advise the Program Manager and Study Lead Engineers on emerging DoD and DAF cybersecurity policy developments that may affect study recommendations during the study period.
• Support the preparation of draft Performance Work Statements for subsequent implementation Task Orders, providing security and compliance requirement language suitable for inclusion in Government acquisition documents.
• Verify that all assigned personnel hold the required security clearances prior to engagement and notify the Government immediately of any clearance status changes.

• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Systems, or a related field from an accredited college or university.
• 7+ years of experience in cybersecurity, information assurance, or security compliance in Defense or Federal government IT environments.
• Demonstrated experience interpreting and applying DoD and Federal cybersecurity policy frameworks including NIST SP 800-53, NIST SP 800-63, DoDI 8520.04, DoDI 8510.01, and related mandates to enterprise IT system design and governance.
• Experience supporting Authority to Operate (ATO) processes for Defense information systems, including RMF package development, security control assessment, and accreditation timeline management.
• Active Secret security clearance (final adjudication required prior to assignment).

Preferred:

• Master’s degree in Cybersecurity, Information Assurance, or a related technical field.
• 10+ years of experience in Defense cybersecurity, information assurance, or ICAM compliance supporting DoD or Federal agency programs.
• Experience supporting security compliance for DAF, Air Force, Space Force, or other DoD component ICAM or identity management modernization programs.
• Direct experience with DAF-specific security mandates including DAFMAN 17-1304, DAFGM2025-01, and DAF Zero Trust implementation guidance., * Deep knowledge of DoD and Federal cybersecurity and identity management policy frameworks, including NIST SP 800-63, NIST SP 800-53, DoDI 8520.04, DoDI 8510.01, CJCSI 6510.01, DAFMAN 17-1304, and the DoD Zero Trust Reference Architecture.
• Strong understanding of Zero Trust Architecture (ZTA) principles and their application to enterprise ICAM systems, disconnected edge environments, non-person entity governance, and identity lifecycle management.
• Experience with the DoD Risk Management Framework (RMF) and Authority to Operate (ATO) process, including security control selection, continuous monitoring requirements, and accreditation timeline management for classified Defense information systems.
• Knowledge of PKI-based authentication, certificate lifecycle management, DoD/DoW X.509 Certificate Policy, and Common Access Card (CAC) authentication security requirements.
• Familiarity with enterprise ICAM platforms including Okta and SailPoint IdentityIQ sufficient to assess security control implementation, audit logging configurations, and governance workflow compliance.
• Knowledge of DoD audit standards and log management requirements, including CJCSI 6510.01 and integration with SIEM and SOC environments.
• Experience performing compliance gap analysis against DoD and Federal security mandates and documenting findings in formal technical reports suitable for Government review.
• Ability to interpret and apply complex, sometimes conflicting regulatory requirements across multiple applicable policy frameworks simultaneously.
• Experience advising technical engineers and architects on security and compliance requirements in a manner that enables practical, implementable solutions rather than creating design obstacles.
• Strong technical writing skills with the ability to produce formal compliance assessments, regulatory mapping documentation, and security requirement sections of technical study reports and draft Performance Work Statements.
• Ability to work collaboratively across cross-functional technical teams including study lead engineers, identity architects, cost analysts, and program managers.
• Exceptional communication skills in English-both written and oral-with the ability to communicate complex security and compliance requirements clearly to both technical engineers and senior non-technical Government stakeholders.
• Ability to obtain and maintain a Secret security clearance.

Desired Skills and Competencies:

• Experience supporting security compliance for disconnected, air-gapped, or tactically deployed Defense IT systems, including CDO-L or DDIL environment accreditation requirements.
• Familiarity with DISA Security Technical Implementation Guides (STIGs) and their application to enterprise identity platform components including Okta and SailPoint deployments in classified environments.
• Knowledge of non-person entity (NPE) security governance requirements, including machine identity management, workload identity Zero Trust integration, and service account security policy.
• Experience assessing and documenting compliance requirements for AI-driven tools, AI Agents, and automated orchestration platforms operating within DoD environments under least-privilege and continuous authorization frameworks.
• Familiarity with enterprise secret vault platforms such as HashiCorp Vault or CyberArk and their associated security control and compliance requirements in DoD environments.
• Knowledge of DoD data retention policy requirements and their application to enterprise collaboration platform offboarding, including Microsoft 365 mailbox handling and litigation hold procedures.
• Experience contributing security and compliance content to draft Performance Work Statements or other Government acquisition documents for Defense IT programs.
• CISSP (Certified Information Systems Security Professional) certification.
• CISM (Certified Information Security Manager) certification.
• CAP (Certified Authorization Professional) or equivalent RMF-focused certification.
• Experience supporting DAF, Air Force, or Space Force cybersecurity, ICAM, or IT modernization programs.
• Familiarity with Agile development methodologies and their intersection with continuous ATO, ongoing authorization, and DevSecOps security compliance frameworks.
• Knowledge of emerging DoD cybersecurity policy developments relevant to ICAM, Zero Trust, and machine identity governance.

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement.

Koniag IT Systems, LLC a Koniag Government Services company, is seeking a Security/Compliance SME with a Secret security clearance to support KITS and our government customer. The position is remote., Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352