Okta ICAM Engineer - Federal Identity & Zero Trust

Concept-Plus; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Paid time off

11 paid holidays

Performance bonuses

Tuition reimbursement

Unlimited training

Job summary

Concept Plus is seeking an Okta ICAM Engineer to support client ICAM modernization initiatives. This role focuses on integrating and optimizing identity solutions within environments that utilize client credentials, federation services, and Zero Trust architecture aligned with federal standards, including NIST SP 800 63, OMB ICAM guidelines, and client identity directives.

You'll design, implement, and maintain Okta-based identity services, perform PKI and SAML/OIDC integrations with government

Qualifications

• 5-8+ years of ICAM/IAM engineering in federal contexts.
• 3-5+ years hands-on experience with Okta Identity Cloud.
• Experience with PIV/CAC authentication, PKI trust chains, and federation with federal IdPs.
• Strong knowledge of authentication protocols (SAML, OIDC, OAuth), SCIM provisioning, and directory services (Active Directory, Azure AD).
• Experience with identity policy, RBAC/ABAC, account lifecycle management, and enterprise identity governance.
• Hands-on experience with automation (PowerShell, Python, or Bash).
• Familiarity with Zero Trust identity architecture, especially in federal or DoW environments.
• Excellent documentation, communication, and collaboration skills.

Responsibilities

• Design, implement, and maintain ICAM solutions using Okta Identity Cloud in support of federal identity requirements, including Workforce Identity, SSO, MFA, and adaptive authentication.
• Integrate Okta with client credential systems, including certificate-based authentication, PKI validation, and federation with government identity providers.
• Configure and support identity federation using SAML, OIDC, and OAuth across government applications, platforms, and on-prem enterprise systems.
• Develop and manage identity lifecycle processes aligned with federal access control policies, RBAC/ABAC models, and authoritative identity sources.
• Implement Zero Trust identity pillars, including strong authentication, device trust, continuous validation, and least-privilege access principles.
• Build automation and identity workflows using Okta Workflows, APIs, and scripting tools to support compliance and operational efficiency.
• Troubleshoot identity-related issues across client authentication flows, PKI chains, SSO integrations, and SCIM provisioning.
• Ensure compliance with NIST 800 63, FICAM architecture standards, DoW IdAM policies, and FedRAMP security controls where required.
• Collaborate closely with cybersecurity, cloud engineering, and system owners to support secure identity integration for mission systems.
• Contribute to ICAM modernization roadmaps, ATO support documentation, and continuous improvements in identity posture.

Skills

Okta Identity Cloud

ICAM/IAM engineering

Federation (SAML/OIDC/OAuth)

PIV/CAC authentication

PKI/TLS/certificate mapping

Zero Trust concepts

PowerShell/Python scripting

Documentation & collaboration

Tools

Okta Identity Cloud

Job description

Concept Plus is seeking an Okta ICAM Engineer to support client ICAM modernization initiatives. This role focuses on integrating and optimizing identity solutions within environments that utilize client credentials, federation services, and Zero Trust architecture aligned with federal standards, including NIST SP 800 63, OMB ICAM guidelines, and client identity directives.

You'll design, implement, and maintain Okta-based identity services, perform PKI and SAML/OIDC integrations with government