Senior ICAM Security Engineer — Okta/SailPoint

Serco; Odessa (TX); On-site; USD 120,000 - 150,000; Full time

Job summary

Serco Inc. seeks aSenior ISSE/ISSO to own ICAM security across enterprise and program systems. You will design, implement, and maintain identity governance using Okta and SailPoint, with RMF/NIST compliance and continuous A&A oversight.

The role requires a current DoD Secret clearance and hands-on engineering depth within a DoD-aligned security program. You will integrate IAM with directory services, PKI, and federated patterns, supporting risk assessments and continuous monitoring while

Qualifications

• Active DoD Secret clearance required at time of hire.
• Bachelor's degree plus 8 years of information systems security experience, with ISSE/ISSO responsibilities.
• OR an Associate's degree and 10 years of information systems security experience, with ISSE/ISSO responsibilities.
• OR a Master's degree and 6 years of information systems security experience, with ISSE/ISSO responsibilities.
• DoD 8570 IAT Level II or III certification (Security+, CySA+, CISSP, or equivalent)
• Demonstrated expertise across ICAM including governance, credentialing/PKI, federation, directory services, and access management architecture.
• Hands-on experience configuring Okta (SSO, MFA, workflows, lifecycle)
• Hands-on experience with SailPoint Identity governance and provisioning.
• Knowledge of NIST SP 800-53, RMF, A&A processes.
• Experience with SAML, OIDC, SCIM, federated identity patterns.
• Experience with PKI/PIV/CAC-based credentialing and certificate-based authentication.

Responsibilities

• Design, implement, and maintain secure identity and access management architecture using Okta and SailPoint.
• Configure and harden Okta SSO, MFA, lifecycle management, and API access policies.
• Engineer SailPoint identity governance workflows including access certifications and provisioning.
• Integrate Okta/SailPoint with AD/AAD, PKI/CAC, and downstream apps via SCIM, SAML, OIDC.
• Conduct security control implementation and RMF A&A activities.
• Support vulnerability remediation, patch management, and secure baselines (STIGs/CIS).
• Embed zero trust and least-privilege in identity workflows.
• Serve as ISSO of record for identity systems and maintain continuous authorization to operate.
• Document risk assessments, POA&Ms, and continuous monitoring.

Skills

ICAM expertise

Okta

SailPoint

RMF/NIST

IAM governance

PAM, PKI, FIC

SAML/OIDC/SCIM

DoD security clearance

Vulnerability management

Education

Bachelor's degree or higher in IS/CS/related

4+ years ISSE/ISSO experience

DoD 8570 IAT Level II/III cert

Tools

Okta administrator

SailPoint IdentityNow/IdentityIQ

Active Directory/Azure AD

Job description

Serco Inc. seeks aSenior ISSE/ISSO to own ICAM security across enterprise and program systems. You will design, implement, and maintain identity governance using Okta and SailPoint, with RMF/NIST compliance and continuous A&A oversight.

The role requires a current DoD Secret clearance and hands-on engineering depth within a DoD-aligned security program. You will integrate IAM with directory services, PKI, and federated patterns, supporting risk assessments and continuous monitoring while