{"id":620974,"url":"https://alion.io/job/conceptplus-okta-icam-engineer","title":"Okta ICAM Engineer","company":{"id":672958,"name":"Concept Plus","domain":"conceptplus.com","url":"https://alion.io/company/conceptplus","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"B","score":78,"open_postings":6,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":69,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":93000,"max_usd":177000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":713},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"FedRAMP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Zero Trust","optional":false},{"name":"NIST CSF","optional":true}],"status":"live","first_seen_at":"2026-09-02T19:42:18Z","employer_posted_date":"2026-09-02","last_verified_at":"2026-11-04T01:54:13Z","board_verified":true,"closed_at":null,"days_open":62,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":62},"description":"About Concept Plus\nConcept Plus is a mission-focused technology solutions provider that transforms IT concepts into impactful solutions for federal agencies. Headquartered in Fairfax, VA, we bring the agility, responsiveness, and customer intimacy of a small business combined with the quality and infrastructure of a larger firm.\nRecognized as an award-winning Oracle partner, we have delivered innovative solutions across Defense, Intelligence, Civilian, Health IT, and Tribal sectors. Our highly certified experts build systems that drive efficiency, accelerate modernization, and ensure mission outcomes with certainty.\nWe offer competitive pay, comprehensive health, dental, and vision insurance, paid life insurance, paid time off, 11 paid holidays, performance bonuses, tuition reimbursement, unlimited training, and the opportunity to thrive in a collaborative, flexible, and innovative environment.\nFor more information, visit www.conceptplus.com.\nAbout the role\nConcept Plus is seeking an Okta ICAM Engineer to support client ICAM modernization initiatives. This role focuses on integrating and optimizing identity solutions within environments that utilize client credentials, federation services, and Zero Trust architecture aligned with federal standards, including NIST SP 800 63, OMB ICAM guidelines, and client identity directives.\nWhat you'll do\nDesign, implement, and maintain ICAM solutions using Okta Identity Cloud in support of federal identity requirements, including Workforce Identity, SSO, MFA, and adaptive authentication. \nIntegrate Okta with client credential systems, including certificate-based authentication, PKI validation, and federation with government identity providers. \nConfigure and support identity federation using SAML, OIDC, and OAuth across government applications, platforms, and on-prem enterprise systems. \nDevelop and manage identity lifecycle processes aligned with federal access control policies, RBAC/ABAC models, and authoritative identity sources. \nImplement Zero Trust identity pillars, including strong authentication, device trust, continuous validation, and least-privilege access principles. \nBuild automation and identity workflows using Okta Workflows, APIs, and scripting tools to support compliance and operational efficiency. \nTroubleshoot identity-related issues across client authentication flows, PKI chains, SSO integrations, and SCIM provisioning. \nEnsure compliance with NIST 800 63, FICAM architecture standards, DoW IdAM policies, and FedRAMP security controls where required. \nCollaborate closely with cybersecurity, cloud engineering, and system owners to support secure identity integration for mission systems. \nContribute to ICAM modernization roadmaps, ATO support documentation, and continuous improvements in identity posture..\nRequired Qualifications\nUS Citizen\n5-8+ years of experience in ICAM/IAM engineering within federal or government environments. \n3-5+ years of hands-on experience with Okta Identity Cloud (administration, integration, federation). \nPractical experience supporting PIV/CAC-based authentication, PKI trust chains, certificate mapping, and federation with federal IdPs. \nStrong understanding of authentication protocols (SAML, OIDC, OAuth), SCIM provisioning, and directory services (Active Directory, Azure AD). \nExperience with identity policy, RBAC/ABAC, account lifecycle management, and enterprise identity governance. \nHands-on experience with automation (PowerShell, Python, or Bash). \nFamiliarity with Zero Trust identity architecture, especially in federal or DoW environments. \nExcellent documentation, communication, and collaboration skills.\nPreferred Qualifications\nExperience supporting ICAM modernization initiatives in federal agencies or DoW environments. \nOkta Professional or Consultant Certification. \nFamiliarity with NIST SP 800 63, NIST CSF, OMB ICAM guidance, DoW Zero Trust Strategy, and FedRAMP controls. \nExperience integrating identity services with Azure Government, or on-prem mission systems.\nConcept Plus is an Equal Opportunity Employer. As such, we will give your application full consideration without regard to your race, color, religion, sex, age, national origin, disability, veteran status, sexual orientation, gender identity, or any other classification protected by federal, state, or local law.","description_format":"text","description_chars":4343,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-09-10T18:44:53Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.903,"p_room":0.6,"age_days":61,"expected_fill_days":69,"reasons":["conf:3","velocity","win:late","crowd:"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/conceptplus-okta-icam-engineer","json_url":"https://alion.io/job/conceptplus-okta-icam-engineer.json","meta":{"generated_at":"2026-11-04T02:27:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3733,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":672958},"rest":"https://alion.io/mcp/rest/get_company?id=672958"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fconceptplus-okta-icam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fconceptplus-okta-icam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fconceptplus-okta-icam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/conceptplus-okta-icam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fconceptplus-okta-icam-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":620974}},{"tool":"search_jobs","arguments":{"company":"conceptplus.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":620974},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}