Note: The job is a remote job and is open to candidates in USA. Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Triage & Assessment Analyst to support a critical Government Identity, Credential, and Access Management (ICAM) initiative. This role involves conducting comprehensive assessments of applications to determine their readiness for onboarding onto the centralized ICAM technical stack, leveraging tools like Okta and SailPoint for identity services.
Responsibilities
- Execute the comprehensive technical triage of pre-registered applications within program-defined timelines, conducting structured assessments of each application's current identity state, authentication mechanisms, authorization frameworks, and technical readiness for integration with the ICAM technical stack
- Review and analyze completed application migration questionnaires provided as Government Furnished Information (GFI), identifying completeness, accuracy, and sufficiency of technical data for triage and enablement planning purposes
- Document questionnaire deficiencies in the Enablement Tracking Database, notifying the Migration Team Lead of incomplete, inaccurate, or insufficient submissions and recommending placement of affected applications into Government-Induced Hold (GIH) status pending resolution
- Conduct structured gap analyses for each assessed application, comparing the application's current identity and access management state against Okta IdP and SailPoint IIQ capability requirements to identify technical gaps, compatibility issues, and integration dependencies
- Develop and maintain a documented risk register for each assessed application, clearly articulating integration challenges such as legacy codebase constraints, non-standard authentication mechanisms, proprietary access control implementations, and other technical impediments to successful enablement
- Determine and document the appropriate enablement pathway for each assessed application, classifying applications as candidates for self-service, automated, or dedicated white glove professional services based on their technical complexity, integration readiness, and risk profile
- Produce clear, detailed, and step-by-step technical pathway documentation for each assessed application, providing migration engineers and application owners with an actionable roadmap for successful enablement
- Upload, maintain, and continuously update all triage findings, gap analyses, risk registers, and pathway determinations in the Enablement Tracking Database, ensuring data is accurate, searchable, and queryable by Government stakeholders in real time
- Coordinate directly with Application Owners and their technical representatives to gather additional technical information required to complete assessments, scheduling and facilitating technical discovery sessions as needed to supplement questionnaire data
- Initiate and manage the Application Owner Escalation Matrix process for unresponsive or non-participating application owners, documenting all engagement attempts and escalating to the Migration Team Lead per established timelines when application owner participation cannot be secured
- Collaborate with the Migration Team Lead to support program prioritization activities, providing assessment-informed recommendations on application sequencing based on technical readiness, risk level, integration complexity, and program-defined prioritization criteria
- Support the ongoing monitoring and tracking of all applications across the enablement pipeline, identifying stalled applications, flagging emerging risks, and providing timely status updates to the Migration Team Lead and program leadership
- Contribute to the development and continuous refinement of triage methodology, assessment frameworks, questionnaire templates, and standard operating procedures to improve assessment consistency, efficiency, and quality across the application portfolio
- Assist in the development of program metrics and reporting outputs by ensuring triage data in the Enablement Tracking Database is consistently structured, accurately categorized, and suitable for aggregation into the program Metrics Dashboard
- Support the transition-in process by assisting in the initial ingestion, organization, and baseline review of the GFI application portfolio database and completed questionnaires received from the predecessor contractor
- Ensure all assessment activities and documentation comply with applicable DoD security requirements, including CUI handling, OPSEC, and DoD cybersecurity certification requirements
- Maintain current knowledge of evolving ICAM platform capabilities, identity integration standards, and DoD Zero Trust requirements, continuously applying updated knowledge to improve assessment accuracy and enablement pathway recommendations
Skills
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field from an accredited college or university
- Minimum of 4 years of experience in information technology, with at least 2 years of direct experience in identity and access management, enterprise application assessment, IT security analysis, or a related discipline
- Demonstrated experience conducting technical assessments or gap analyses of enterprise applications or IT systems in a structured, documented manner
- Familiarity with enterprise identity platforms, authentication protocols, and access management frameworks in a production environment
- Active Secret clearance. Must be able to satisfy requirements for CAC-card issuance and NIPRNet access, including annual DoD CyberAwareness training and certification
- Strong analytical and critical thinking skills with the ability to rapidly assess diverse application architectures, identity implementations, and technical documentation to produce accurate and actionable triage findings
- Working knowledge of Identity, Credential, and Access Management (ICAM) concepts, including identity providers (IdP), identity governance and administration (IGA), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC)
- Familiarity with industry-standard identity protocols including SAML 2.0, OAuth 2.0, OIDC, and SCIM, including a conceptual understanding of how these protocols are implemented in enterprise application environments
- Experience conducting structured gap analyses that compare current-state IT configurations against target-state requirements, producing clear and actionable findings documentation
- Ability to develop and maintain risk registers that clearly articulate technical integration risks, associated impacts, and recommended mitigation approaches
- Strong organizational skills with the ability to manage and track large volumes of application assessments simultaneously while maintaining accuracy and completeness of documentation
- Demonstrated experience producing high-quality written technical documentation including assessment reports, gap analyses, pathway recommendations, and data entries in program tracking systems
- Experience coordinating with diverse technical and non-technical stakeholders to gather required information, facilitate discovery activities, and drive assessment processes to completion
- Proficiency with data management and tracking tools, including the ability to maintain structured databases, produce queryable data entries, and support the generation of program metrics and dashboards
- Familiarity with DoD security requirements, including CUI handling, OPSEC, DFARS 252.204-7012, and DoDM 8140.03 cybersecurity certification requirements
- Strong communication skills in English—both written and oral—with the ability to clearly convey technical assessment findings and integration recommendations to both technical engineers and non-technical application owners and program stakeholders
- Ability to work effectively both independently and as part of a collaborative cross-functional team under the direction of a technical lead
- Proficiency with Microsoft Office Suite and collaboration tools such as Microsoft Teams
- Ability to obtain and maintain required DoD cybersecurity certifications per DoDM 8140.03 (e.g., Security+ for IAT II or equivalent)
- Prior experience supporting DoD IT programs, particularly within an ICAM, cybersecurity, or Zero Trust context
- Experience working in a federal government IT contracting environment
- Hands-on experience with Okta and/or SailPoint IdentityIQ (IIQ) in an enterprise environment
- Hands-on experience with Okta Identity Provider platform administration or configuration, including familiarity with Okta Universal Directory, application integrations, and SSO configuration
- Hands-on experience with SailPoint IdentityIQ (IIQ), including familiarity with connector configuration, provisioning workflows, and entitlement management
- Experience assessing legacy application authentication and authorization mechanisms, including the ability to evaluate proprietary or non-standard identity implementations against modern ICAM integration requirements
- Familiarity with Zero Trust Architecture (ZTA) principles and their application to identity and access management assessment within a DoD context
- Experience working with Government Furnished Information (GFI) databases and large application portfolio datasets in a federal contracting environment
- Knowledge of enterprise directory services including Active Directory and LDAP, and their role in enterprise identity architectures
- Familiarity with automated provisioning concepts, SCIM-based directory synchronization, and identity lifecycle management principles
- Experience supporting or contributing to large-scale IT migration, modernization, or application onboarding programs in a federal environment
- Certified Information Systems Security Professional (CISSP), CompTIA Security+, or related cybersecurity certification
- Okta Certified Professional or SailPoint certification, or demonstrated working knowledge of these platforms through equivalent hands-on experience
- Experience developing and refining assessment methodologies, triage frameworks, and standard operating procedures for application evaluation programs
- Familiarity with Section 508 compliance requirements for electronic and information technology
- Experience with CDRL deliverable contribution and technical documentation requirements in a federal contracting environment
- Familiarity with Agile and hybrid Agile-Waterfall program execution methodologies
- Experience using program tracking and metrics tools to manage and report on large application portfolios across multiple concurrent workstreams
Benefits
- Health, dental and vision insurance
- 401K with company matching
- Flexible spending accounts
- Paid holidays
- Three weeks paid time off
Company Overview