Note: The job is a remote job and is open to candidates in USA. Koniag IT Systems, a Koniag Government Services company, is seeking an experienced Middleware Engineer to support a critical Government Identity, Credential, and Access Management initiative. The Middleware Engineer will be responsible for designing, developing, and deploying custom middleware solutions that enable integration with the centralized ICAM technical stack, ensuring secure and compliant operations.
Responsibilities
- Design, develop, test, and deploy custom middleware solutions, integration proxies, protocol translators, and adapter components that enable legacy applications to authenticate and authorize through the ICAM technical stack when native protocol support is unavailable
- Engineer custom connectors, REST and SOAP APIs, scripts, and integration libraries that facilitate the connection of non-standard applications to Okta IdP and SailPoint IIQ, leveraging existing platform connectors where possible and developing bespoke solutions where they are not
- Analyze legacy application architectures, authentication mechanisms, and data flows to identify integration gaps and design technically sound middleware approaches that bridge proprietary or outdated identity systems with modern SAML, OAuth 2.0, OIDC, and SCIM-based ICAM capabilities
- Develop and maintain reusable integration libraries, sample code repositories, and middleware components that can be leveraged across multiple application enablement efforts to accelerate onboarding velocity and reduce duplicative engineering effort
- Collaborate with migration engineers to support the technical triage of assigned applications, providing middleware feasibility assessments and contributing to the documentation of integration pathways, risk registers, and gap analyses in the Enablement Tracking Database
- Provide technical guidance and engineering support to Application Owners who are undertaking their own integration efforts, including advising on middleware architecture, providing sample code for common integration patterns, and troubleshooting application-side integration failures
- Support the design and implementation of automated provisioning and deprovisioning workflows, including the development of SCIM endpoints, directory synchronization scripts, and lifecycle management hooks for applications that require custom provisioning solutions
- Develop and implement solutions that support the configuration of Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks within target applications, including the development of attribute mapping logic, claims transformation middleware, and authorization policy enforcement components
- Participate in the engineering and development of self-service and automated enablement pathway tooling, contributing reusable middleware components and integration accelerators that simplify the onboarding process for application owners navigating the enablement pipeline independently
- Conduct rigorous unit testing, integration testing, and security testing of all developed middleware solutions prior to deployment, ensuring solutions are functionally correct, secure, and compliant with applicable DoD standards
- Support the testing program by contributing to test plan development, executing technical integration tests, providing sample code and reusable libraries for UAT events, and assisting with defect diagnosis and resolution for middleware-related integration failures
- Ensure all developed middleware, connectors, scripts, and custom tools comply with applicable supply chain risk management requirements per DFARS 239.73, including vetting all third-party code libraries and dependencies to prevent the introduction of cybersecurity vulnerabilities, malicious code, or unauthorized data exfiltration pathways
- Produce and maintain comprehensive technical documentation for all developed middleware solutions, including architecture diagrams, data flow diagrams, API specifications, deployment guides, and operational runbooks
- Contribute to the development and continuous improvement of middleware engineering standards, coding best practices, reusable component libraries, and integration playbooks that drive consistency and quality across the application portfolio
- Ensure all developed solutions comply with Section 508 accessibility standards and applicable DoD security requirements, including CUI handling, OPSEC, and DFARS 252.204-7012
- Maintain current knowledge of evolving middleware technologies, identity integration patterns, and DoD Zero Trust requirements, proactively applying this knowledge to improve the quality and capability of developed solutions
Skills
- Bachelor's degree in Computer Science, Software Engineering, Information Technology, Information Systems, or a related field from an accredited college or university
- Minimum of 5 years of hands-on software or systems engineering experience, with at least 3 years of direct experience in middleware development, API engineering, or enterprise application integration
- Demonstrated experience designing and developing custom integration solutions, including REST APIs, SOAP web services, protocol adapters, or middleware components in a production enterprise environment
- Experience integrating applications with enterprise identity platforms using SAML, OAuth 2.0, OIDC, or SCIM
- Active Secret clearance. Must be able to satisfy requirements for CAC-card issuance and NIPRNet access, including annual DoD CyberAwareness training and certification
- Strong proficiency in one or more programming languages commonly used in enterprise middleware and integration development, such as Java, Python, JavaScript, Node.js, C#, or PowerShell
- Hands-on experience developing and consuming REST APIs and SOAP web services, including API design, versioning, authentication, and error handling best practices
- Working knowledge and practical implementation experience with SAML 2.0, OAuth 2.0, OIDC, and SCIM identity and authorization protocols, including the ability to develop custom protocol handlers, token transformation logic, and claims mapping components
- Experience analyzing and reverse-engineering legacy application authentication and authorization mechanisms to design compatible middleware integration approaches
- Familiarity with enterprise Identity Provider (IdP) platforms, particularly Okta, and Identity Governance and Administration (IGA) platforms, particularly SailPoint IdentityIQ (IIQ), including their integration APIs and connector frameworks
- Experience developing and working with directory services integration, including LDAP, Active Directory, and SCIM-based directory synchronization
- Proficiency with source code version control systems such as Git, including branching strategies, code review processes, and collaborative development workflows
- Experience implementing secure coding practices, including input validation, secrets management, least-privilege access, and vulnerability mitigation in developed middleware solutions
- Ability to conduct unit testing, integration testing, and security-focused code reviews of developed solutions, ensuring quality and compliance prior to deployment
- Strong analytical and problem-solving skills with the ability to assess complex legacy application architectures and design pragmatic, technically sound middleware integration solutions
- Strong technical documentation skills, including the ability to produce clear and comprehensive architecture diagrams, data flow diagrams, API specifications, and operational runbooks
- Familiarity with DoD security requirements, including CUI handling, OPSEC, DFARS 252.204-7012, DFARS 239.73 supply chain risk management, and DoDM 8140.03 cybersecurity certification requirements
- Strong communication skills in English—both written and oral—with the ability to clearly explain middleware architecture and integration approaches to both technical peers and non-technical application owners
- Ability to work effectively both independently and as part of a collaborative cross-functional team
- Proficiency with Microsoft Office Suite and collaboration tools such as Microsoft Teams
- Ability to obtain and maintain required DoD cybersecurity certifications per DoDM 8140.03 (e.g., Security+ for IAT II or equivalent)
- Secret clearance
- Prior experience supporting DoD IT programs, particularly within an ICAM, cybersecurity, or Zero Trust context
- Experience working in a federal government IT contracting environment
- Experience developing middleware solutions specifically for legacy application modernization or enterprise identity migration programs
Benefits
- Health, dental and vision insurance
- 401K with company matching
- Flexible spending accounts
- Paid holidays
- Three weeks paid time off
- More
- The position is remote
Company Overview