Identity Federation & PKI Architect (Hybrid)

Koniag Services, Inc.; Washington (District of Columbia); Híbrido; USD 120 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical, dental, and vision insurance

401(k) retirement plan

Paid time off

Parental leave

Life and disability insurance

Flexible spending accounts

Commuter benefits

Tuition reimbursement

Resumo da oferta

Koniag Government Services seeks an IAM & PKI Engineer to support a federal client in Washington, DC. The role is hybrid, focusing on cross-domain identity integration, SSO, and secure token exchange across Ping Identity, Okta, and Entra.

The engineer will manage PKI operations, MFA, and phishing-resistant authentication, aligning with federal standards and cloud identity ecosystems. Strong scripting and IaC skills are required.

Qualificações

• Bachelor’s degree in a related field required.
• 6–10+ years of IAM and network security engineering experience.
• Minimum of 4 years configuring federated identity and enterprise PKI.

Responsabilidades

• Design, build, and maintain enterprise federation connections (SAML, OAuth 2.0, OIDC).
• Configure and troubleshoot identity topologies using Ping Identity, Okta, and Entra.
• Implement passwordless and phishing-resistant authentication (FIDO2/WebAuthn).
• Manage PKI lifecycles, CAs, and integration with PIV/CAC and IdPs.

Conhecimentos

Ping Identity

Okta

Microsoft Entra

OIDC

OAuth 2.0

SAML 2.0

FIDO/WebAuthn

ADCS

PowerShell

Python

Formação académica

Bachelor’s Degree

Ferramentas

Ping Identity

Okta

Microsoft Entra

ADCS

Descrição da oferta de emprego

Koniag Government Services seeks an IAM & PKI Engineer to support a federal client in Washington, DC. The role is hybrid, focusing on cross-domain identity integration, SSO, and secure token exchange across Ping Identity, Okta, and Entra.

The engineer will manage PKI operations, MFA, and phishing-resistant authentication, aligning with federal standards and cloud identity ecosystems. Strong scripting and IaC skills are required.