Senior ICAM Security Engineer: Okta & SailPoint Expert

Serco; Arkansas; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan with employer matching

Job summary

Serco Inc. seeks a Senior ISSE/ISSO to lead ICAM security across enterprise systems, owning architecture, implementation, and continuous authorization per RMF/NIST. The role combines risk management with hands-on engineering for IAM, PKI, SAC, and governance using Okta and SailPoint.

Required DoD Secret clearance and strong background in identity, credential, and access management, plus experience with SAML, OIDC, and federation. Central Time hours and 25% travel may be expected.

Qualifications

• Active DoD Secret clearance required at time of hire.
• Experience with Okta SSO, MFA, lifecycle management.
• Hands-on SailPoint IdentityNow/IdentityIQ for governance, certifications, provisioning.

Responsibilities

• Design, implement, and maintain secure identity and access management architecture leveraging Okta and SailPoint.
• Configure and harden Okta SSO, adaptive MFA, lifecycle management, and API access policies.
• Engineer SailPoint identity governance workflows, including access certifications, role mining, and SoD policies.

Skills

ICAM

Okta

SailPoint

RMF/NIST

SAML

OIDC

PKI/CAC

PAM

AD/Azure AD

RBAC/ABAC

SCIM

Education

Bachelor's degree + 8 years information systems security experience

Associate's degree + 10 years information systems security experience

Master's degree + 6 years information systems security experience

Tools

Okta

SailPoint IdentityNow/IdentityIQ

Active Directory/Azure AD

PKI/CAC

SAML

OIDC

Job description

Serco Inc. seeks a Senior ISSE/ISSO to lead ICAM security across enterprise systems, owning architecture, implementation, and continuous authorization per RMF/NIST. The role combines risk management with hands-on engineering for IAM, PKI, SAC, and governance using Okta and SailPoint.

Required DoD Secret clearance and strong background in identity, credential, and access management, plus experience with SAML, OIDC, and federation. Central Time hours and 25% travel may be expected.