Koniag Government Services, LLC

Role Description Koniag Data Solutions, LLC (KDS) is seeking an experienced Cloud Architect (Services) to support the design, development, and modernization of scalable, secure, and efficient cloud services for the Administration for Children and Families (ACF), a U.S. Department of Health and Human Services component. The ideal candidate is a strategic, collaborative cloud professional who can translate mission and security requirements into practical cloud architectures, automation, and service-improvement initiatives. The Cloud Architect (Services) will perform a key technical role supporting ACF cloud modernization, cybersecurity, operational resilience, and mission delivery. - Design and architect end-to-end cloud-service and infrastructure solutions that meet performance, scalability, security, resilience, interoperability, and cost-efficiency requirements. - Develop and enforce cloud architecture standards, patterns, governance practices, and technical reference architectures across program environments. - Lead the evaluation, selection, and implementation of cloud services, platforms, and technologies that support mission-critical objectives and program modernization. - Collaborate with engineering, development, security, and operations teams to integrate cloud solutions with existing systems, workflows, and enterprise services. - Develop and maintain cloud architecture documentation, including architecture diagrams, technical specifications, service designs, reference architectures, and decision records. - Support continuous ATO and automated ATO processes by designing cloud-service patterns, automation, integrations, and evidence-producing controls that support ongoing authorization and monitoring. - Design and support ingestion, normalization, and use of compliance data from FedRAMP, StateRAMP, SOC 2, and other approved sources within cloud-security, assessment, and authorization workflows. - Develop or contribute to Security Assessment Verification and Validation Plans that define objectives, scope, dependencies, control-validation approaches, and implementation roadmaps. - Design and implement cloud architectures that enable AI-driven analytics and automation, where approved, to improve threat detection, operational response, and service management. - Lead or support Continuity of Operations (COOP), disaster recovery, and business-continuity planning; design and evaluate cloud solutions that sustain mission and business processes during and after disruptions. - Participate in Red Team/Blue Team exercises by ensuring cloud-service architectures support controlled testing, monitoring, analysis, remediation, and lessons learned. - Support strategy, planning, and process-improvement activities for the Enterprise Security Operations Center (ESOC), including current-state assessment, future-state architecture, service-roadmap development, and operational improvement recommendations. - Conduct cloud-readiness assessments and lead migration planning for on-premises and legacy systems transitioning to cloud environments. - Monitor and optimize cloud infrastructure for performance, reliability, and cost; implement automation and IaC solutions where appropriate. - Ensure cloud environments adhere to federal security and compliance requirements, including FedRAMP, NIST SP 800-53, FISMA, and other applicable frameworks. - Provide technical leadership and mentorship to engineers and cloud practitioners; communicate architecture decisions and tradeoffs to stakeholders, system analysts, and business leaders. - Operate within an Agile delivery environment while satisfying project stage gates, delivery milestones, and documentation requirements. - Evaluate emerging cloud technologies and recommend adoption strategies that improve cloud capabilities, security posture, and modernization outcomes. Qualifications - Bachelor's degree in Computer Science, Information Technology, Computer Information Systems, or a related field from an accredited college or university. - 8+ years of experience in IT infrastructure, cloud computing, or related fields, with at least 5 years in a cloud architecture role. - Demonstrated experience designing and implementing solutions on one or more major cloud platforms: AWS, Microsoft Azure, or Google Cloud Platform. - Experience with cloud-migration strategies, including lift-and-shift, re-platforming, and re-architecting approaches. Requirements - Exceptional written and oral communication skills in English, with the ability to communicate complex technical concepts effectively to technical and non-technical stakeholders. - Deep expertise in cloud-platform services, including compute, storage, networking, databases, security, observability, and DevOps tooling across AWS, Azure, and/or GCP. - Proficiency in IaC tools such as Terraform, AWS CloudFormation, Azure Resource Manager (ARM) templates, or equivalent tools. - Strong understanding of cloud-networking concepts, including VPCs, VPNs, load balancing, DNS, CDN, and hybrid-connectivity solutions. - Experience designing and implementing cloud-security architectures, including IAM, encryption, secure logging, policy enforcement, and Zero Trust principles. - Knowledge of containerization and orchestration technologies, including Docker and Kubernetes. - Familiarity with CI/CD pipeline design and DevSecOps practices. - Experience with cloud monitoring, logging, and observability tools, such as AWS CloudWatch, Azure Monitor, Splunk, Datadog, or equivalent platforms. - Working knowledge of cATO/automated ATO concepts, continuous monitoring, security-evidence automation, and compliance-data integration. - Experience working within compliance frameworks such as FedRAMP, NIST SP 800-53, FISMA, and SOC 2. - Knowledge of business-continuity, disaster-recovery, and COOP principles as applied to cloud services. - Strong understanding of cost management and FinOps principles for cloud environments. - Ability to provide technical leadership and guidance in a collaborative, Agile delivery environment. Benefits - Competitive compensation. - Extraordinary benefits package including health, dental and vision insurance. - 401K with company matching. - Flexible spending accounts. - Paid holidays. - Three weeks paid time off. - And more. Security Requirement - Ability to obtain a Public Trust Clearance.

Role Description Koniag Data Solutions, LLC (KDS) is seeking an experienced FinOps Specialist to support cloud-financial management operations for the Administration for Children and Families (ACF), a U.S. Department of Health and Human Services component. The ideal candidate is a detail-oriented financial and technical professional with strong analytical skills, a practical understanding of cloud pricing models, and a commitment to financial accountability, transparency, and cost optimization. The FinOps Specialist will perform a key technical role supporting ACF cloud modernization, cybersecurity, operational resilience, and mission delivery. - Perform ongoing cloud-cost analysis across one or more cloud service providers, including AWS, Azure, and GCP, to identify spending trends, anomalies, optimization opportunities, and risks. - Develop, maintain, and execute chargeback and showback models that accurately allocate cloud costs to appropriate business units, programs, systems, or cost centers. - Build, maintain, and deliver biweekly dashboards and reports reflecting cloud-spend trends, budget variances, utilization, forecast changes, material issues, and risks. - Monitor cloud budgets, forecast future spend, and provide timely reporting and actionable variance analysis to leadership, program management, and finance stakeholders. - Collaborate with engineering, cloud architecture, and DevOps teams to identify and implement cost-saving recommendations, including right-sizing, savings plans, reserved instances, resource scheduling, storage optimization, and tagging improvements. - Support the development and enforcement of cloud cost-governance policies, tagging standards, allocation rules, budget controls, and financial-management best practices. - Partner with procurement and vendor-management teams to evaluate cloud pricing agreements, enterprise discount programs, consumption commitments, and contract terms. - Support project budget adherence by identifying emerging cost pressures, reporting risks and variances, and coordinating recommended corrective actions with program stakeholders. - Support documentation, tracking, and validation of Other Direct Cost (ODC) expenditures by maintaining accurate cost records, confirming that required supporting documentation is available, and tracking written Contracting Officer Representative (COR) pre-approval status before costs are incurred. - Assess and document whether proposed ODC expenditures appear fair and reasonable based on available pricing, estimates, or comparable cost information; elevate findings to the appropriate program, contracts, procurement, or COR authority for review and disposition. - Participate in Agile or program-management ceremonies, including sprint planning and backlog refinement, as they relate to FinOps priorities and cost-optimization activities. - Maintain current documentation of chargeback methodologies, cost-allocation models, dashboard logic, forecasts, optimization findings, ODC support records, and governance decisions. - Serve as a subject matter resource on FinOps principles, helping technical, financial, and program stakeholders understand cloud-financial-management practices and decision tradeoffs. Qualifications - Bachelor's degree in Finance, Accounting, Computer Science, Information Systems, Business Administration, or a related field from an accredited college or university. - 3+ years of experience in cloud financial management, FinOps, IT finance, or a related discipline. - Demonstrated experience with cloud-cost-management tools, such as AWS Cost Explorer, Azure Cost Management, GCP Billing, CloudHealth, Apptio Cloudability, or similar platforms. - Demonstrated experience developing and managing chargeback or showback models in a multi-team or enterprise environment. Requirements - Strong understanding of cloud-pricing models, billing structures, and cost-optimization strategies across one or more major cloud providers. - Proficiency in developing and managing chargeback and showback frameworks for accurate cost allocation across business units, systems, programs, or cost centers. - Experience building financial reports, dashboards, and visualizations that communicate cloud spend, trends, variances, risks, and forecasts to technical and non-technical audiences. - Ability to perform cloud-cost forecasting and variance analysis, identify deviations from budget, and recommend corrective actions. - Experience delivering regular recurring reporting, including biweekly financial and operational dashboards. - Familiarity with cloud resource-tagging strategies and governance policies that support cost attribution, accountability, and data quality. - Experience documenting, tracking, or validating costs, approvals, and supporting records in a program, contract, procurement, or financial-control environment. - Strong analytical and problem-solving skills with high attention to detail. - Exceptional written and oral communication skills in English, with the ability to present financial data clearly to executive, finance, program, and technical audiences. - Ability to work collaboratively in a cross-functional team environment with engineering, finance, procurement, contracts, and program-management stakeholders. - Proficiency in Microsoft Excel or Google Sheets for financial modeling, data analysis, and reconciliation. Benefits - Competitive compensation. - Extraordinary benefits package including health, dental and vision insurance. - 401K with company matching. - Flexible spending accounts. - Paid holidays. - Three weeks paid time off. - And more. Security Requirement - Ability to obtain a Public Trust Clearance. Desired Skills and Competencies - FinOps Certified Practitioner (FinOps Foundation) or equivalent certification. - Experience with cloud-management platforms such as CloudHealth, Apptio Cloudability, Spot.io, or similar tools. - Knowledge of IaC concepts and how cloud resources are provisioned and managed, such as Terraform or CloudFormation. - Experience working in a federal government IT or cloud environment. - Familiarity with Agile development methodologies, especially Scrum. - Experience with data-visualization tools such as Power BI, Tableau, or Looker. - AWS Certified Cloud Practitioner, Microsoft Azure Fundamentals (AZ-900), or equivalent cloud-provider certification. - Understanding of ITIL or IT Service Management (ITSM) frameworks as they relate to cloud-financial operations. - Experience supporting ODC documentation, COR pre-approval tracking, or federal contract cost-control processes.

Role Description Koniag Data Solutions, LLC (KDS) is seeking an experienced Cloud Architect (Network) with an AWS Advanced Networking Specialty to support secure, scalable, and highly available cloud-networking solutions for the Administration for Children and Families (ACF), a U.S. Department of Health and Human Services component. The ideal candidate is a seasoned cloud-networking professional with deep expertise in AWS networking services, hybrid connectivity, Zero Trust architecture, and federal security requirements. The Cloud Architect (Network) will perform a key technical role supporting ACF cloud modernization, cybersecurity, operational resilience, and mission delivery. - Design, implement, and manage advanced AWS networking architectures, including VPCs, Transit Gateways, Direct Connect, VPNs, PrivateLink, Route 53, Elastic Load Balancing, CloudFront, Global Accelerator, and related services. - Develop and maintain network architecture documentation, diagrams, technical standards, and configuration baselines to promote consistency, resilience, and compliance across cloud environments. - Collaborate with security teams to implement network-security controls, including security groups, network ACLs, AWS WAF, AWS Shield, AWS Network Firewall, segmentation, secure ingress and egress, and Zero Trust-aligned controls. - Design and support PKI-enabled application and network capabilities for digital signatures, encryption, identification, authentication, and secure communications. - Plan and document physical and network-access requirements for security testing; define internal and external test-environment connectivity, segmentation, access paths, and safeguards. - Evaluate existing network infrastructure and provide recommendations for optimization, modernization, risk reduction, and migration to AWS cloud environments. - Lead the design and implementation of hybrid cloud-networking solutions that securely connect on-premises data centers and other external environments to AWS. - Work closely with DevOps and engineering teams to integrate network solutions into CI/CD pipelines and IaC frameworks using Terraform, AWS CloudFormation, AWS CDK, or equivalent tools. - Implement and maintain advanced monitoring, detection, and analysis capabilities for cybersecurity threats using network telemetry, VPC Flow Logs, CloudWatch, and other approved tools. - Monitor network performance, troubleshoot complex connectivity and security issues, and implement corrective actions to maintain service availability and reliability. - Participate in Red Team/Blue Team exercises by designing test environments, validating network controls, analyzing results, and implementing approved remediation actions. - Support compliance efforts by ensuring network designs adhere to FedRAMP, NIST SP 800-53, FISMA, and other applicable federal security requirements. - Operate in an Agile delivery environment while satisfying government project requirements, stage gates, and documentation expectations. - Provide technical leadership, mentorship, and guidance to junior cloud and network engineers. - Remain current on emerging AWS networking technologies, services, and industry practices to continually improve cloud-networking capabilities. Qualifications - Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field from an accredited college or university. - 7+ years of experience in network engineering or architecture, with at least 4+ years focused on cloud networking in AWS environments. - AWS Certified Advanced Networking - Specialty certification. Requirements - Ability to obtain public trust. Preferred - Master's degree in a related field. - Experience supporting federal government IT programs and projects. Required Skills and Competencies - Exceptional written and oral communication skills in English, with the ability to communicate complex technical concepts to technical and non-technical stakeholders. - Deep expertise in AWS networking services, including VPC, Transit Gateway, Direct Connect, AWS PrivateLink, Route 53, Elastic Load Balancing, CloudFront, and AWS Global Accelerator. - Strong understanding of networking fundamentals, including TCP/IP, DNS, BGP, OSPF, MPLS, SD-WAN, routing, switching, segmentation, and network troubleshooting. - Experience designing and implementing hybrid and multi-cloud network architectures connecting on-premises environments to AWS. - Proficiency with IaC tools such as Terraform, AWS CloudFormation, or AWS CDK for automating network provisioning and configuration. - Experience implementing network-security controls, including AWS Security Groups, Network ACLs, AWS WAF, AWS Shield, AWS Network Firewall, and secure network segmentation. - Knowledge of PKI concepts and application of PKI-supported capabilities for authentication, encryption, identification, and digital signatures. - Experience planning network-access and connectivity requirements for internal and external security-testing environments. - Familiarity with federal security and compliance frameworks, including FedRAMP, NIST SP 800-53, FISMA, and related standards. - Experience with network monitoring, threat analysis, and performance management tools, including AWS CloudWatch, VPC Flow Logs, and third-party monitoring platforms. - Ability to troubleshoot and resolve complex cloud-networking and network-security issues in production environments. - Ability to work collaboratively, provide technical leadership and mentorship, and participate in Agile delivery teams. Desired Skills and Competencies - Experience working in a federal government IT environment. - Additional AWS certifications, such as AWS Certified Solutions Architect - Professional or AWS Certified Security - Specialty. - Experience with multi-cloud networking strategies involving Azure and/or Google Cloud Platform (GCP). - Knowledge of Zero Trust network-architecture principles and implementation. - Experience with container networking in Kubernetes and Amazon EKS environments. - Familiarity with DevSecOps practices and integrating network-security controls into CI/CD pipelines. - Experience with network automation using Python, Ansible, or similar scripting and automation tools. - Experience supporting FedRAMP authorization processes, including preparation of System Security Plans (SSPs) and related documentation. - Experience participating in Red Team/Blue Team exercises or implementing network-control remediation based on exercise findings.

Role Description Kadiak, LLC, a Koniag Government Services company, is seeking a Senior Sustainment Project Manager – Federal Electronic Health Record (EHR) Program in MD. The position is remote. This position requires the candidate to be able to obtain a Public Trust. We are seeking an experienced Senior Sustainment Project Manager to lead the planning, execution, and continuous improvement of sustainment activities for a large-scale Federal Electronic Health Record (EHR) implementation. This role is responsible for ensuring the successful transition from deployment to steady-state operations while driving operational excellence, stakeholder satisfaction, and continuous service improvement. The ideal candidate is a strategic critical thinker with exceptional project management expertise, a passion for process improvement, and a proven ability to lead complex initiatives across highly cross-functional, multi-vendor, and client-facing environments. This individual will collaborate with government stakeholders, clinical and technical teams, implementation partners, and operational support organizations to ensure the long-term success and optimization of the EHR platform. Key Responsibilities - Lead sustainment initiatives supporting a large-scale Federal EHR program, ensuring operational readiness, stability, and continuous improvement. - Manage multiple concurrent workstreams across technical, operational, clinical, and business stakeholders. - Develop and maintain integrated project plans, schedules, risk registers, issue logs, and executive status reports. - Serve as the primary interface between government clients, implementation partners, and third-party vendors to coordinate activities and resolve cross-functional dependencies. - Drive process optimization initiatives that improve operational efficiency, service delivery, governance, and customer satisfaction. - Facilitate executive-level meetings, steering committees, and cross-functional working groups while communicating project status, risks, and mitigation strategies. - Identify operational gaps, analyze root causes, and develop scalable solutions that improve sustainment performance. - Partner with Change Management, Training, Infrastructure, Cybersecurity, Service Desk, Clinical Informatics, and Engineering teams to ensure seamless operational support. - Monitor project performance using KPIs, SLAs, and operational metrics to drive data-informed decision making. - Manage project scope, budget, schedules, resource allocation, and contractual deliverables while ensuring compliance with federal requirements. - Lead risk identification, mitigation planning, and issue resolution across multiple organizations and vendors. - Ensure adherence to PMO governance, quality standards, and federal program management best practices. - Support transition planning, release management, and operational readiness activities for new EHR capabilities. Qualifications - Bachelor's degree in Business, Healthcare Administration, Information Technology, Engineering, or a related field. - 8+ years of project or program management experience supporting large-scale IT or healthcare technology initiatives. - Demonstrated experience supporting Federal government contracts, preferably within the Department of Veterans Affairs (VA), Department of Defense (DoD), or other federal healthcare agencies. - Experience supporting Electronic Health Record (EHR) implementations, sustainment, optimization, or modernization programs. - Proven success leading highly cross-functional teams across multiple organizations and vendor partners. - Strong client-facing consulting experience with executive-level communication and stakeholder management skills. - Exceptional critical thinking, analytical problem-solving, and decision-making abilities. - Demonstrated experience leading business process improvement initiatives using Lean, Six Sigma, Agile, ITIL, or similar methodologies. - Experience managing project risks, dependencies, budgets, schedules, and contractual deliverables. - Strong facilitation, negotiation, conflict resolution, and organizational skills. - Proficiency with project management tools such as Microsoft Project, Jira, Azure DevOps, ServiceNow, or similar platforms. - Ability to Travel 2-4 times per year (~15% travel time). Preferred Qualifications - Active PMP certification. - Agile certifications (Certified ScrumMaster, PMI-ACP, SAFe, or equivalent). - ITIL Foundation or higher certification. - Lean Six Sigma Green Belt or Black Belt certification. - Experience supporting Oracle Health (formerly Cerner Millennium), Epic, or other enterprise EHR platforms. - Experience working within highly regulated federal healthcare environments. - Active Public Trust or Secret security clearance (or ability to obtain one). Core Competencies - Strategic and critical thinking - Process improvement and operational excellence - Executive stakeholder management - Cross-functional leadership - Multi-vendor coordination - Client relationship management - Program governance - Risk and issue management - Change leadership - Executive communication and presentation - Data-driven decision making - Continuous improvement mindset - Collaboration and influence without direct authority - Adaptability in fast-paced, complex environments What Success Looks Like The successful candidate will establish trusted relationships with government stakeholders, effectively coordinate across multiple vendors and functional teams, proactively identify and resolve operational challenges, and continuously improve sustainment processes that enhance system performance, customer experience, and mission outcomes. They will bring a collaborative leadership style, a commitment to operational excellence, and the ability to navigate ambiguity while delivering measurable results in a complex federal healthcare environment. Our Equal Employment Opportunity Policy The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment. The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.

Role Description Koniag Data Solutions, LLC (KDS) is seeking an experienced DevOps Engineer to support next-generation cloud infrastructure, modernization, and cybersecurity automation efforts for the Administration for Children and Families (ACF), a U.S. Department of Health and Human Services component. The ideal candidate is a technically proficient, collaborative team member with hands-on experience in GitLab, CI/CD pipelines, Infrastructure as Code (IaC), multi-cloud environments, and security automation. The DevOps Engineer (Next Generation Cloud) will perform a key technical role supporting ACF cloud modernization, cybersecurity, operational resilience, and mission delivery. - Design, implement, and maintain GitLab CI/CD pipelines that automate build, test, security validation, and deployment workflows. - Develop and manage Infrastructure as Code (IaC) solutions using Ansible, AWS CloudFormation, Terraform, or related technologies to provision and configure cloud resources consistently. - Engineer, deploy, and manage secure, scalable cloud infrastructure across AWS and Azure environments, with emphasis on availability, resiliency, and repeatable delivery. - Support continuous Authorization to Operate (cATO) and automated ATO processes by automating compliance checks, evidence collection, assessment workflows, and use of pre-configured templates. - Integrate and operationalize security and compliance telemetry from tools such as Splunk, Tenable, and CrowdStrike to support continuous monitoring, automated compliance validation, and remediation tracking. - Support ingestion, normalization, and use of compliance data from FedRAMP, StateRAMP, SOC 2, and related sources within authorization and continuous-monitoring workflows. - Maintain cloud configuration-management processes, approved baselines, and version-controlled environment configuration standards. - Provide engineering support for continuous cybersecurity operations, including technical enablement of 24x7 security monitoring, event-log management, alerting, dashboards, and reporting. - Support incident-response activities by developing or maintaining automation, integrations, and infrastructure capabilities used for containment, eradication, recovery, and post-incident analysis. - Implement and improve analytics and automation capabilities, including AI-enabled approaches where approved, to enhance threat detection, triage, and operational efficiency. - Produce and maintain event-log management reports and supporting artifacts consistent with applicable federal requirements, including OMB M-21-31. - Collaborate with development, security, cloud architecture, and operations teams to integrate DevSecOps practices throughout the software delivery lifecycle. - Monitor, troubleshoot, and optimize cloud infrastructure and pipeline performance; resolve complex issues in a timely and effective manner. - Develop and maintain technical documentation, including runbooks, architecture diagrams, standard operating procedures, configuration records, and operational playbooks. - Participate in Agile ceremonies and evaluate tools, technologies, and processes that improve DevOps, cloud operations, security automation, and system onboarding. Qualifications - Bachelor's degree in Computer Science, Information Technology, Systems Engineering, or a related field from an accredited college or university. - 5+ years of experience in a DevOps, Cloud Engineering, or related technical role. - Hands-on experience with GitLab for source control management and CI/CD pipeline development. - Demonstrated experience working with AWS and/or Azure cloud platforms. - Practical experience with Infrastructure as Code tools, including Ansible and AWS CloudFormation. Requirements - Exceptional written and oral communication skills in English, with the ability to communicate effectively with technical and non-technical stakeholders. - Proficiency in designing, building, and maintaining CI/CD pipelines using GitLab CI/CD. - Strong experience with IaC tools, including Ansible and AWS CloudFormation; experience with Terraform is also beneficial. - Hands-on experience provisioning, configuring, and managing AWS and/or Azure cloud resources. - Experience with version control and branching strategies using Git and GitLab. - Experience integrating, supporting, or consuming data from security and observability tools such as Splunk, Tenable, CrowdStrike, CloudWatch, or equivalent platforms. - Working knowledge of continuous monitoring, cATO/automated ATO concepts, security evidence automation, and federal compliance processes. - Knowledge of NIST SP 800-53, NIST SP 800-37, FIPS 199, FedRAMP, and related cloud-security requirements. - Knowledge of containerization and orchestration technologies such as Docker and Kubernetes. - Experience with scripting languages such as Bash, Python, or PowerShell to support automation tasks. - Familiarity with cloud-security practices, including IAM, secrets management, network-security configurations, logging, and auditability. - Ability to troubleshoot complex infrastructure, pipeline, and security-integration issues across multi-cloud environments. - Familiarity with Agile Development Methodology, especially Scrum. - Ability to work in a team environment under the direction of a technical lead. - Ability to obtain a Public Trust Clearance. Desired Skills and Competencies - Experience working in a federal government IT environment. - AWS Certified DevOps Engineer, AWS Solutions Architect, or equivalent cloud certification. - Microsoft Azure certification, such as Azure DevOps Engineer Expert or Azure Administrator. - Experience with GitLab Ultimate features, including security scanning, DAST/SAST, and compliance pipelines. - Experience automating compliance evidence collection, security-control validation, POA&M tracking, or continuous-monitoring workflows. - Familiarity with event-log management and reporting practices aligned to OMB M-21-31. - Experience with monitoring and observability tools such as CloudWatch, Datadog, Prometheus, Grafana, or equivalent platforms. - Experience with secrets-management tools such as HashiCorp Vault or AWS Secrets Manager. - Knowledge of Zero Trust principles and their application in cloud environments. - Experience supporting cloud migration or modernization projects within a government or enterprise setting.

Role Description Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Database Developer to support KITS and our government customer. The position is remote and requires the candidate to be able to obtain a Public Trust. The Database Developer will play a critical role in designing, building, and maintaining data systems to support business needs. The ideal candidate will have a strong background in: - Data architecture - Data modeling - Data warehousing - Data manipulation and transformation This role will focus on: - Data modeling - Building and optimizing data engineering pipelines - Implementing CI/CD practices - Developing serverless functions across AWS and Azure environments Qualifications - Bachelor’s degree in computer science, Data Development, Information Technology, or a related field - 7+ years of experience in data engineering, data architecture, or similar technical roles - Demonstrated expertise in database systems, data warehousing, and ETL processes - 6+ years as a Python programming language expert Requirements - ETL/ELT Processes: Building data pipelines using a mix of stored procedures, views, and Python scripts. Knowledge of tools like dbt or simple orchestration (e.g., Airflow basics) is a plus. - Data Quality & Testing: Implementing checks, validation, and monitoring for pipelines. - Version Control & Collaboration: Git for code (Python + SQL scripts), plus experience with CI/CD basics. - Performance & Scalability: Tuning for large volumes, understanding indexing/partitioning impacts, and basic cloud database concepts. - Soft Skills: Problem-solving for debugging complex queries/pipelines, clear documentation of models and procedures, and ability to collaborate with team members. - Data Modeling: Strong experience in designing relational schemas, Entity-Relationship (ER) modeling, dimensional modeling, and understanding trade-offs between normalization vs. denormalization. - Advanced SQL & Database Querying: Mastery of complex queries, query optimization, and performance tuning. - Database Administration & Objects: Creating and managing stored procedures, optimizing views, and other DBA tasks. - Python Programming for Data Engineering: Solid proficiency in Python for scripting, automation, and data manipulation. - Relational Database Experience: Hands-on work with at least one major RDBMS (e.g., SQL Server, PostgreSQL, MySQL). - Other Key Skills: Excellent problem-solving and analytical abilities with attention to detail, strong communication and collaboration skills. Benefits - Competitive compensation - Extraordinary benefits package including health, dental, and vision insurance - 401K with company matching - Flexible spending accounts - Paid holidays - Three weeks paid time off - And more Security Requirement - Ability to obtain Public Trust

Role Description Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced ICAM Custom Tools Developer to join a team supporting Identity, Credential, and Access Management (ICAM) solutions for our government customers. The ideal candidate is a technically skilled and creative software developer with deep expertise in designing and building custom tools, utilities, automations, and integrations that extend and enhance the capabilities of enterprise ICAM platforms and support the operational needs of federal identity and access management programs. This individual will play a pivotal role in delivering innovative, mission-aligned software solutions that bridge capability gaps, streamline ICAM operations, and accelerate the delivery of identity services across the enterprise. The ICAM Custom Tools Developer will be responsible for: - Design, development, testing, deployment, and maintenance of custom software tools, utilities, scripts, automation solutions, and integrations that support and extend the capabilities of ICAM platforms. - Collaborating with ICAM architects, platform engineers, integration specialists, service desk teams, and government stakeholders to identify capability gaps and operational needs. - Translating requirements into high-quality software solutions. - Delivering tools that enhance the efficiency, security, and mission effectiveness of ICAM services. Principal responsibilities will include but are not limited to: - Design, develop, test, deploy, and maintain custom software tools, utilities, scripts, and automation solutions that support and extend the capabilities of ICAM platforms, including Okta and SailPoint. - Collaborate with stakeholders to gather and analyze requirements, identify capability gaps, and define technical solutions. - Develop custom integrations between ICAM platforms and enterprise systems, applications, and data sources. - Build and maintain automation scripts and workflows that streamline ICAM operational processes. - Design and develop custom web applications, portals, and dashboards for ICAM administrators and end users. - Develop custom connectors, plugins, and extensions for Okta and SailPoint platforms. - Implement automated testing frameworks for custom-developed tools and solutions. - Contribute to the design and implementation of data pipelines and reporting solutions. - Apply secure software development practices throughout the development lifecycle. - Participate in DevSecOps processes and Agile development ceremonies. - Provide Tier 3 technical support for custom-developed tools and solutions. - Stay current with emerging development technologies and proactively identify opportunities to enhance custom tooling solutions. - Contribute to code reviews and technical design sessions. - Support ATO processes by contributing to security documentation. Qualifications - Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related field from an accredited college or university; equivalent work experience may be considered in lieu of a degree. - 4+ years of hands-on software development experience. - 2+ years of experience developing custom tools, integrations, or automation solutions for identity and access management platforms in a federal government environment. - Active Secret Clearance required. Requirements - Exceptional communication skills in English – both written and oral. - Strong proficiency in one or more modern programming languages relevant to ICAM tool development. - Hands-on experience developing integrations with Okta and/or SailPoint platforms. - Strong understanding of REST API design principles and API authentication mechanisms. - Experience developing web applications and dashboards using modern frameworks. - Proficiency with version control systems, particularly Git. - Experience implementing automated testing frameworks. - Knowledge of secure software development practices. - Familiarity with CI/CD pipeline tools. - Experience with containerization technologies. - Understanding of identity federation protocols and standards. - Familiarity with relational and non-relational database technologies. - Experience developing comprehensive technical documentation. - Demonstrated ability to work in an Agile development environment. Benefits - Competitive compensation. - Extraordinary benefits package including health, dental, and vision insurance. - 401K with company matching. - Flexible spending accounts. - Paid holidays. - Three weeks paid time off. - And more.

Role Description Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced ICAM Integration Specialist – Enablement to join a team supporting Identity, Credential, and Access Management (ICAM) solutions for our government customers. The ideal candidate is a technically skilled and collaborative professional with deep expertise in integrating enterprise applications and systems with ICAM platforms, particularly Okta and SailPoint, within a federal government environment. This individual will play a pivotal role in enabling seamless, secure, and efficient connectivity between ICAM platforms and the broader enterprise application ecosystem, driving the onboarding of applications, services, and identity sources to support mission objectives. The ICAM Integration Specialist – Enablement will be responsible for designing, implementing, and supporting the integration of enterprise applications, systems, and identity sources with Okta and SailPoint ICAM platforms in a federal government environment. This individual will serve as a key technical resource for application onboarding, SSO enablement, identity governance integration, and lifecycle management automation, working closely with application teams, ICAM engineers, security personnel, and government stakeholders to deliver secure and scalable integration solutions. - Lead and support the onboarding of enterprise applications and services to Okta and SailPoint platforms, including the configuration of SSO integrations, provisioning connectors, and access governance policies. - Design, configure, and implement Single Sign-On (SSO) integrations between Okta and enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and other supported federation protocols. - Develop and configure SailPoint provisioning connectors and integration modules to enable automated identity lifecycle management, including joiner/mover/leaver processes, for integrated applications and systems. - Collaborate with application owners, development teams, and system administrators to gather integration requirements, assess technical feasibility, and develop integration designs and implementation plans. - Configure and maintain Okta application integrations, including the Okta Integration Network (OIN), custom SAML/OIDC applications, and API-based integrations leveraging Okta's REST APIs. - Develop and maintain SailPoint application integrations using native connectors, SCIM, REST APIs, and custom connector development as required to support identity governance and provisioning workflows. - Implement and maintain Okta Lifecycle Management policies and SailPoint provisioning workflows to automate user provisioning, deprovisioning, and access changes across integrated applications. - Support the configuration and maintenance of Okta Workflows and SailPoint workflow rules to automate identity-related processes and enable event-driven integration scenarios. - Conduct integration testing, including functional testing, regression testing, and user acceptance testing (UAT), to validate the correctness and security of ICAM integrations prior to production deployment. - Troubleshoot and resolve complex integration issues across Okta and SailPoint environments, analyzing logs, API responses, and system events to identify root causes and implement solutions. - Develop and maintain comprehensive integration documentation, including integration design documents, data flow diagrams, configuration guides, and runbooks for all onboarded applications. - Maintain an accurate and up-to-date application integration catalog, tracking integration status, protocols, owners, and configuration details for all applications onboarded to the ICAM platform. - Collaborate with security teams and ISSMs to ensure all integrations comply with federal security requirements, access control policies, and ICAM governance standards. - Support the development and enforcement of application onboarding standards, integration patterns, and best practices to ensure consistency and quality across the ICAM integration portfolio. - Participate in change management processes, assessing the security and operational impact of proposed integration changes and supporting their review and approval. - Provide technical guidance and enablement support to application teams navigating the ICAM integration process, serving as a subject matter expert and point of contact throughout the onboarding lifecycle. - Support continuous improvement initiatives by identifying opportunities to streamline, automate, and enhance the application onboarding and integration enablement process. Qualifications - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field from an accredited college or university; equivalent work experience may be considered in lieu of a degree. - 4+ years of hands-on experience in enterprise application integration, identity and access management, or a related technical discipline. - 3+ years of hands-on experience integrating applications with Okta and/or SailPoint platforms, including SSO configuration and provisioning connector development. - Experience working in a federal government IT environment. Requirements - Active Secret Clearance required. - Exceptional communication skills in English – both written and oral – with the ability to communicate complex integration concepts clearly to both technical teams and non-technical application owners and government stakeholders. - Hands-on experience configuring and managing Okta application integrations, including SAML 2.0, OAuth 2.0, and OIDC-based SSO integrations, OIN catalog applications, and custom application configurations. - Hands-on experience developing and managing SailPoint application integrations, including native connectors, SCIM-based integrations, and custom connector development using the SailPoint connector framework. - Strong working knowledge of identity federation protocols and standards, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, and LDAP, and their practical application in enterprise integration scenarios. - Experience implementing automated provisioning and deprovisioning workflows in Okta and SailPoint, including joiner/mover/leaver process automation and event-driven lifecycle management. - Familiarity with Okta Lifecycle Management, Okta Workflows, and Okta API Access Management capabilities and their application in enterprise integration scenarios. - Experience with SailPoint provisioning workflows, rules, and policies, including BeanShell or Java-based rule development for custom integration logic. - Strong understanding of REST API concepts and experience consuming and troubleshooting REST APIs in the context of ICAM platform integrations. - Experience conducting integration testing, including functional testing, regression testing, and UAT, to validate ICAM integrations prior to production deployment. - Ability to analyze and interpret system logs, API responses, and audit trails to troubleshoot and resolve complex integration issues. - Experience developing and maintaining technical integration documentation, including design documents, data flow diagrams, and configuration guides. - Knowledge of Active Directory (AD), Azure Active Directory (AAD/Entra ID), and LDAP directory services and their role in ICAM integration scenarios. - Familiarity with federal ICAM frameworks and identity management standards, including FICAM, NIST SP 800-63, and Zero Trust Architecture principles. - Demonstrated ability to manage multiple integration projects and priorities simultaneously in a fast-paced, team-oriented environment. Desired Skills and Competencies - Experience supporting large-scale application onboarding and ICAM enablement programs in a federal government environment. - Okta Certified Administrator, Okta Certified Consultant, or Okta Certified Developer certification. - SailPoint Certified IdentityIQ Engineer, SailPoint Identity Security Cloud Engineer, or equivalent SailPoint certification. - Experience integrating ICAM platforms with cloud-native applications and services hosted on AWS, Azure, or Google Cloud, including familiarity with cloud IAM services. - Familiarity with FedRAMP authorization requirements and the security considerations associated with integrating FedRAMP-authorized applications with federal ICAM platforms. - Experience with middleware and integration platforms such as MuleSoft, Azure Logic Apps, or AWS API Gateway in support of ICAM integration scenarios. - Knowledge of Privileged Access Management (PAM) platforms such as CyberArk or BeyondTrust and their integration with enterprise ICAM ecosystems. - Understanding of PIV/CAC authentication and its integration with enterprise applications within federal ICAM architectures. - Experience with scripting languages such as Python, PowerShell, or JavaScript for automation of integration tasks and custom connector development. - Familiarity with DevSecOps practices and CI/CD pipeline integrations involving ICAM platform deployments and application onboarding automation. - Experience with graph-based entitlement management and identity analytics tools and their integration within ICAM platforms. - Knowledge of emerging identity standards and technologies, including SCIM 2.0, Continuous Access Evaluation Protocol (CAEP), and Shared Signals Framework (SSF). - CISSP, CompTIA Security+, or other relevant cybersecurity certifications. - Experience participating in Agile development teams and contributing to sprint-based delivery of integration capabilities.

Role Description Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced ICAM SailPoint Support Engineer to join a team supporting Identity, Credential, and Access Management (ICAM) solutions for our government customers. The ideal candidate is a technically skilled professional with a strong background in identity and access management technologies, particularly within the SailPoint platform, and is passionate about delivering secure and reliable solutions in a federal environment. The ICAM SailPoint Support Engineer will provide technical support, configuration, administration, and maintenance of SailPoint-based Identity, Credential, and Access Management solutions in a federal government environment. The engineer will work closely with security teams, system administrators, and government stakeholders to ensure the integrity, availability, and security of identity governance and access management systems. - Provide day-to-day administration, configuration, and support of the SailPoint platform, including identity lifecycle management, role management, access certifications, and provisioning workflows. - Troubleshoot and resolve ICAM-related incidents, service requests, and problems in a timely manner, adhering to established SLAs. - Configure and maintain SailPoint Identity Security Cloud (ISC) or IdentityIQ (IIQ) features including access certifications, role-based access control (RBAC), separation of duties (SoD) policies, and automated provisioning/deprovisioning. - Integrate SailPoint with enterprise applications, directories, and third-party services using REST APIs, SCIM, and connector frameworks. - Support the onboarding and offboarding of users, roles, and applications within the SailPoint environment. - Monitor system health, review logs, and proactively identify and address potential issues within the ICAM ecosystem. - Collaborate with security and compliance teams to ensure IAM configurations meet federal security standards and frameworks, including NIST guidelines and Zero Trust principles. - Assist in the development and maintenance of technical documentation, standard operating procedures (SOPs), and runbooks related to ICAM and SailPoint operations. - Participate in change management processes, including planning, testing, and implementing changes to the SailPoint environment. - Support audits and compliance reviews by generating access reports, certification campaigns, and configuration documentation. - Work with cross-functional teams to evaluate and implement new SailPoint features and capabilities that align with mission requirements. - Provide Tier 2/Tier 3 support for escalated identity governance and access management issues. Qualifications - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field from an accredited college or university; equivalent work experience may be considered in lieu of a degree. - 3+ years of hands-on experience administering and supporting SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud (ISC), or a comparable Identity Governance and Administration (IGA) platform. - Active Secret Clearance required. - Relevant SailPoint certification(s) required (e.g., SailPoint Certified IdentityIQ Engineer, SailPoint Identity Security Cloud Engineer, or SailPoint Certified Administrator). Requirements - Exceptional communication skills in English – both written and oral – with the ability to communicate effectively with technical and non-technical stakeholders. - Hands-on experience administering the SailPoint platform, including identity lifecycle management, access certifications, role management, provisioning workflows, and SoD policy enforcement. - Strong understanding of Identity Governance and Administration (IGA) concepts including joiner/mover/leaver processes, RBAC, and entitlement management. - Experience integrating SailPoint with Active Directory (AD), LDAP, and enterprise applications via native connectors or REST/SCIM APIs. - Familiarity with ICAM frameworks, principles, and federal identity management standards (e.g., NIST SP 800-63, FICAM). - Experience supporting users and applications in a ticketing/ITSM environment (e.g., ServiceNow, Jira). - Ability to analyze and interpret system logs to diagnose and resolve identity governance and provisioning issues. - Knowledge of role-based access control (RBAC) and attribute-based access control (ABAC) models and their implementation within SailPoint. - Knowledge of Zero Trust Architecture principles and their application to identity governance and access management. - Ability to create and maintain clear technical documentation, SOPs, and runbooks. - Demonstrated ability to work both independently and collaboratively in a team environment. Desired Skills and Competencies - Experience working in a federal government IT environment supporting ICAM programs. - SailPoint Certified IdentityIQ Architect or SailPoint Identity Security Cloud Architect certification. - Experience with SailPoint BeanShell/Java scripting for custom rule development and workflow configuration. - Familiarity with Privileged Access Management (PAM) solutions and concepts, such as CyberArk or BeyondTrust. - Experience with DevSecOps practices and CI/CD pipeline integrations involving identity services. - Knowledge of cloud platforms such as AWS, Azure, or Google Cloud and their native IAM services. - Experience with scripting languages (e.g., Python, PowerShell) for automation of identity management and provisioning tasks. - Familiarity with additional IAM/ICAM platforms such as Okta, Ping Identity, or ForgeRock. - Understanding of PIV/CAC authentication and its integration within federal environments. - Experience supporting ATO (Authority to Operate) processes and contributing to security documentation such as System Security Plans (SSPs). - CISSP, Security+, or other relevant cybersecurity certifications. Benefits - Competitive compensation. - Extraordinary benefits package including health, dental and vision insurance. - 401K with company matching. - Flexible spending accounts. - Paid holidays. - Three weeks paid time off. - And more.

Role Description Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced Senior ICAM Integration Specialist – Enablement to join a team supporting Identity, Credential, and Access Management (ICAM) solutions for our government customers. The ideal candidate is a highly skilled and technically authoritative professional with extensive expertise in designing, implementing, and leading the integration of enterprise applications and systems with ICAM platforms, particularly Okta and SailPoint, within a federal government environment. This individual will serve as a senior technical resource and team leader for application onboarding, SSO enablement, identity governance integration, and lifecycle management automation, driving the strategic development and execution of integration initiatives that support mission objectives and federal ICAM mandates. The Senior ICAM Integration Specialist – Enablement will serve as a senior technical leader responsible for architecting, implementing, and overseeing the integration of enterprise applications, systems, and identity sources with Okta and SailPoint ICAM platforms in a federal government environment. - Lead the design, implementation, and oversight of enterprise application and service onboarding to Okta and SailPoint platforms. - Serve as a senior technical authority and subject matter expert on ICAM integration patterns, standards, and best practices. - Architect and implement complex Single Sign-On (SSO) integrations between Okta and enterprise applications. - Lead the development of advanced SailPoint provisioning connectors, integration modules, and custom rules. - Collaborate with ICAM architects, application owners, development teams, and security personnel. - Drive the development, maintenance, and enforcement of application onboarding standards and best practices. - Lead the configuration and optimization of Okta Lifecycle Management policies and workflows. - Oversee and perform advanced troubleshooting and root cause analysis for complex integration issues. - Lead integration testing activities, including the development of test plans and testing frameworks. - Mentor and provide technical guidance to junior and mid-level ICAM integration specialists. - Develop and maintain authoritative integration documentation. - Maintain and continuously improve an accurate and comprehensive application integration catalog. - Collaborate with ISSMs, security architects, and compliance teams to ensure adherence to federal security requirements. - Lead continuous improvement initiatives to streamline and enhance the application onboarding process. - Engage directly with government stakeholders and senior leadership to communicate integration strategies. - Participate in and contribute to architecture review boards (ARBs) and change control boards (CCBs). - Evaluate and recommend emerging integration technologies, tools, and frameworks. Qualifications - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. - 7+ years of hands-on experience in enterprise application integration, identity and access management, or a related technical discipline. - 5+ years of hands-on experience integrating applications with Okta and/or SailPoint platforms. - Demonstrated experience in a senior or lead technical role. - Experience working in a federal government IT environment. Requirements - Active Secret Clearance required. - Exceptional communication skills in English – both written and oral. - Expert-level, hands-on experience configuring and managing Okta application integrations. - Expert-level, hands-on experience developing and managing SailPoint application integrations. - Expert knowledge of identity federation protocols and standards. - Demonstrated experience leading the design and implementation of enterprise-scale automated provisioning workflows. - Advanced expertise with Okta Lifecycle Management and Okta API Access Management capabilities. - Advanced expertise with SailPoint provisioning workflows, rules, policies, and role management. - Expert-level understanding of REST API design and consumption. - Demonstrated ability to lead integration testing activities. - Ability to perform advanced analysis of system logs and diagnostic data. - Experience developing authoritative technical integration documentation. - Strong knowledge of Active Directory (AD), Azure Active Directory (AAD/Entra ID), and LDAP directory services. - Comprehensive knowledge of federal ICAM frameworks and identity management standards. - Demonstrated ability to lead technical teams and mentor junior staff. Benefits - Competitive compensation. - Extraordinary benefits package including health, dental, and vision insurance. - 401K with company matching. - Flexible spending accounts. - Paid holidays. - Three weeks paid time off. - And more.