Identity Platform Integration Engineer

Peraton; United States; Remote; USD 66,000 - 106,000; Full time

Job summary

Peraton is seeking an Identity Platform Integration Engineer to support the DoD ICAM platform, enabling secure authentication services for millions. The role specializes in identity integration, secure API design, and enterprise data sources, with hands-on development in Java/Spring Boot/.NET and Okta OIE integrations.

This 100% remote position requires deep IAM/ICAM knowledge, experience with API gateways, secure token management, and DoD compliance frameworks like RMF and STIG. U.S.

Qualifications

• 5 years with BS/BA; 3 years with MS/MA; 0 years with Ph, 9 years with HS diploma
• Must be able to obtain and maintain a Public Trust
• U.S. Citizenship required
• Experience designing, developing, and integrating RESTful APIs
• Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), PKCE, and token management
• Experience implementing secure API authentication and authorization (JWT, access and refresh tokens)
• Experience integrating with the Okta Identity Engine (OIE) and enterprise IAM services
• Experience integrating identity services with authoritative identity repositories
• Background in secure backend development using Java, Spring Boot, .NET, or similar frameworks
• Experience with API gateways, microservices, and backend orchestration
• Proficiency with JSON/XML and API contract development
• Experience implementing enterprise integration patterns and asynchronous messaging
• Understanding of authentication workflow orchestration and session management
• Experience building backend services supporting native mobile authentication
• Knowledge of API security best practices, OWASP API Security Top 10, mTLS, and certificate authentication
• Experience with databases and secure data access patterns
• Experience in CI/CD pipelines and DevSecOps environments
• Hands‑on experience with unit, integration, and API testing tools (Postman, Swagger/OpenAPI)
• Experience supporting enterprise ICAM/CIAM solutions in cloud or hybrid architectures
• Knowledge of NIST SP 800‑63 and Zero Trust Architecture
• Experience supporting RMF and STIG cybersecurity compliance

Responsibilities

• Design, develop, and integrate RESTful APIs supporting identity workflows and partner application authentication
• Implement OAuth 2.0, OpenID Connect (OIDC), PKCE, and secure token management patterns
• Build secure API authentication and authorization services using JWT, access tokens, and refresh tokens
• Integrate backend services with the Okta Identity Engine (OIE), Okta Embedded SDK, and DoD enterprise IAM solutions
• Implement identity service integrations with authoritative identity repositories and enterprise data sources
• Develop secure backend web services using Java, Spring Boot, .NET, or equivalent technologies
• Support API gateway configurations, microservices architecture, and service orchestration patterns
• Implement JSON/XML data exchange models and develop API contracts supporting partner application consumption
• Apply enterprise integration patterns and asynchronous messaging (queues, events, service buses)
• Design authentication workflow orchestration and session management services
• Develop backend services supporting mobile authentication for native iOS and Android applications
• Apply advanced API security practices, including OWASP API Security Top 10, mTLS, and certificate‑based authentication
• Implement secure database integration and data access patterns
• Develop reusable identity services supporting multiple Partner Applications
• Implement API Gateway integrations
• Implement enterprise audit logging and operational telemetry
• Contribute to CI/CD pipelines, automated builds, and DevSecOps processes
• Perform unit, integration, and API testing using tools such as Postman, Swagger/OpenAPI
• Participate in Agile development, Git‑based version control, and secure configuration management
• Integrate enterprise ICAM/CIAM platforms in cloud or hybrid environments
• Ensure identity solutions comply with NIST SP 800‑63 Digital Identity Guidelines and Zero Trust Architecture principles
• Support DoD cybersecurity requirements, including RMF and STIG compliance

Skills

API design

OAuth 2.0

OIDC

PKCE

JWT tokens

Okta OIE

Enterprise IAM

RESTful APIs

APIs security

API gateways

Microservices

JSON/XML

CI/CD DevSecOps

Testing: Postman/Swagger

Agile & Git

Zero Trust

NIST SP 800-63

RMF/STIG

Java/Spring Boot/.NET

Cloud/Hybrid ICAM

Education

BS/BA

MS/MA

HS diploma

Tools

Okta Identity Engine Embedded SDK

Postman

Swagger/OpenAPI

Job description

Responsibilities

Peraton is seeking an Identity Platform Integration Engineer to support the Department of Defense's next‑generation enterprise Identity, Credential, and Access Management (ICAM) platform that is replacing DS Logon and providing secure authentication services for millions of Service Members, Veterans, Family Members, and Beneficiaries. The Alternative Multi‑factor Authentication Support Services (AMASS) Program provides secure, scalable identity and access management services across the Department of Defense, enabling authentication, authorization, and digital identity interoperability for high visibility DoD systems.

In this role you will specialize in identity integration, secure authentication services, and API development, not general‑purpose backend application development. The ideal candidate has hands‑on experience with modern IAM/ICAM standards, secure API design, enterprise identity services, and mission‑critical service integration within Federal environments.

This is a 100% remote role.

• Design, develop, and integrate RESTful APIs supporting identity workflows and partner application authentication.
• Implement OAuth 2.0, OpenID Connect (OIDC), PKCE, and secure token management patterns.
• Build secure API authentication and authorization services using JWT, access tokens, and refresh tokens.
• Integrate backend services with the Okta Identity Engine (OIE), Okta Embedded SDK, and DoD enterprise IAM solutions.
• Implement identity service integrations with authoritative identity repositories and enterprise data sources.
• Develop secure backend web services using Java, Spring Boot, .NET, or equivalent technologies.
• Support API gateway configurations, microservices architecture, and service orchestration patterns.
• Implement JSON/XML data exchange models and develop API contracts supporting partner application consumption.
• Apply enterprise integration patterns and asynchronous messaging (queues, events, service buses).
• Design authentication workflow orchestration and session management services.
• Develop backend services supporting mobile authentication for native iOS and Android applications.
• Apply advanced API security practices, including OWASP API Security Top 10, mTLS, and certificate‑based authentication.
• Implement secure database integration and data access patterns.

• Develop reusable identity services supporting multiple Partner Applications.
• Implement API Gateway integrations.
• Implement enterprise audit logging and operational telemetry.
• Contribute to CI/CD pipelines, automated builds, and DevSecOps processes.
• Perform unit, integration, and API testing using tools such as Postman, Swagger/OpenAPI, or equivalent.
• Participate in Agile development, Git‑based version control, and secure configuration management.
• Integrate enterprise ICAM/CIAM platforms in cloud or hybrid environments.
• Ensure identity solutions comply with NIST SP 800‑63 Digital Identity Guidelines and Zero Trust Architecture principles.
• Support DoD cybersecurity requirements, including RMF and STIG compliance.

Qualifications

Required Qualifications

• 5 years with BS/BA; 3 years with MS/MA; 0 years with Ph, 9 years with HS diploma
• Must be able to obtain and maintain a Public Trust
• U.S. Citizenship required
• Experience designing, developing, and integrating RESTful APIs.
• Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), PKCE, and token management.
• Experience implementing secure API authentication and authorization (JWT, access and refresh tokens).
• Experience integrating with the Okta Identity Engine (OIE) and enterprise IAM services.
• Experience integrating identity services with authoritative identity repositories.
• Background in secure backend development using Java, Spring Boot, .NET, or similar frameworks.
• Experience with API gateways, microservices, and backend orchestration.
• Proficiency with JSON/XML and API contract development.
• Experience implementing enterprise integration patterns and asynchronous messaging.
• Understanding of authentication workflow orchestration and session management.
• Experience building backend services supporting native mobile authentication.
• Knowledge of API security best practices, OWASP API Security Top 10, mTLS, and certificate authentication.
• Experience with databases and secure data access patterns.
• Experience in CI/CD pipelines and DevSecOps environments.
• Hands‑on experience with unit, integration, and API testing tools (Postman, Swagger/OpenAPI).
• Experience supporting enterprise ICAM/CIAM solutions in cloud or hybrid architectures.
• Knowledge of NIST SP 800‑63 and Zero Trust Architecture.
• Experience supporting RMF and STIG cybersecurity compliance.

Preferred Qualifications

• Experience integrating backend services with Okta Identity Engine Embedded SDK.
• Experience supporting large‑scale Federal ICAM/CIAM programs.
• Knowledge of DoD identity services, CAC/PIV, derived credentials, or enterprise credentialing.
• Experience with event‑driven architectures or high‑security distributed systems.
• Familiarity with DoD Zero Trust initiatives and identity modernization.

Target Salary Range

$66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.