Okta ICAM Engineer - Federal Identity & Zero Trust

conceptplus; United States; On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive pay

Health, dental, and vision insurance

Life insurance

Paid time off

11 paid holidays

Performance bonuses

Tuition reimbursement

Unlimited training

Collaborative, innovative environment

Job summary

Concept Plus is seeking an Okta ICAM Engineer to support federal ICAM modernization initiatives. This role focuses on integrating and optimizing identity solutions within environments that rely on client credentials, federation, and Zero Trust architecture aligned with U.S.

government standards. The engineer will design and implement Okta-based identity systems, integrate with PIV/CAC authentication, and enable SSO, MFA, and adaptive authentication across government apps and on-prem systems.

Qualifications

• US Citizen
• 5–8+ years ICAM/IAM engineering in federal or government environments.
• 3–5+ years hands-on experience with Okta Identity Cloud (administration, integration, federation).
• Experience with PIV/CAC-based authentication, PKI trust chains, certificate mapping, and federation with federal IdPs.
• Strong understanding of authentication protocols (SAML, OIDC, OAuth), SCIM provisioning, and directory services (Active Directory, Azure AD).
• Experience with identity policy, RBAC/ABAC, account lifecycle management, and enterprise identity governance.
• Hands-on automation experience (PowerShell, Python, or Bash).
• Familiarity with Zero Trust identity architecture in federal/DoW environments.
• Excellent documentation, communication, and collaboration skills.

Responsibilities

• Design, implement, and maintain ICAM solutions using Okta Identity Cloud for workforce identity, SSO, MFA, and adaptive authentication.
• Integrate Okta with client credential systems, including certificate-based authentication and federation with government IdPs.
• Configure and support identity federation using SAML, OIDC, and OAuth across government apps and on-prem systems.
• Develop and manage identity lifecycle processes aligned with access control policies and RBAC/ABAC models.
• Implement Zero Trust identity pillars, including device trust and least-privilege access.
• Build automation and identity workflows using Okta Workflows, APIs, and scripting tools for compliance and efficiency.
• Troubleshoot identity-related issues across authentication flows, PKI chains, SSO, and SCIM provisioning.
• Ensure compliance with NIST 800-63, FICAM, DoW IdAM policies, and FedRAMP controls where required.
• Collaborate with cybersecurity, cloud engineering, and system owners to support secure identity integration for mission systems.
• Contribute to ICAM modernization roadmaps and ATO support documentation.

Skills

Communication

Collaboration

Documentation

Automation

Tools

Okta Identity Cloud

PowerShell

Python

Bash

SAML

OIDC

OAuth

SCIM

Job description

Concept Plus is seeking an Okta ICAM Engineer to support federal ICAM modernization initiatives. This role focuses on integrating and optimizing identity solutions within environments that rely on client credentials, federation, and Zero Trust architecture aligned with U.S.

government standards. The engineer will design and implement Okta-based identity systems, integrate with PIV/CAC authentication, and enable SSO, MFA, and adaptive authentication across government apps and on-prem systems.