Role Description Coretek Services is seeking a Senior Azure Systems Engineer. This individual will provide operational coverage for critical infrastructure responsibilities while also supporting the company’s Azure-based Digital Transformation environment. - Serve as a backup for day-to-day infrastructure operations, including: - PowerMax storage administration, partition setup, monitoring, and cleanup - SFTP/FTP server administration and customer or carrier account setup - Monitoring approximately 100 scheduled file-transfer processes and resolving failures, capacity issues, and other anomalies - Firewall rule changes and IP address whitelisting - Server, network, storage, security, and infrastructure incident response - Assist with infrastructure monitoring, troubleshooting, documentation, patching, upgrades, and operational support. - Provide advanced technical support for Azure services used in the Digital Transformation program, including Azure networking, AKS, App Services, Functions, Storage, Key Vault, Entra ID, Azure Monitor, Sentinel, and related security services. - Support Azure environment configuration, deployment, monitoring, troubleshooting, access management, and operational readiness. - Develop and maintain infrastructure documentation, procedures, diagrams, and knowledge-transfer materials. - Participate in disaster recovery, security, and after-hours support activities when required. Qualifications - Senior-level experience supporting Windows, Linux, storage, networking, firewalls, and enterprise infrastructure. - Strong hands-on experience with Microsoft Azure infrastructure and platform services. - Experience supporting hybrid environments that include both on-premises data centers and Azure. - Strong troubleshooting, documentation, communication, and knowledge-transfer skills. - Ability to work independently while collaborating closely with internal staff, vendors, and development teams.

• Serve as a hands-on technical contributor responsible for executing the integration and onboarding of NIPRNet applications onto a centralized ICAM technical stack • Directly support the Department of Defense (DoD) Zero Trust Execution Roadmap • Deliver technically sound, secure, and compliant integration solutions while maintaining accurate documentation and status reporting throughout the enablement process • Execute the technical integration of assigned NIPRNet applications into the ICAM technical stack • Conduct thorough technical triage of assigned applications, assessing each application's current identity state, identifying integration gaps, documenting risks, and determining the appropriate enablement pathway • Collaborate with internal engineers, integration specialists, and the Migration Team Lead to resolve complex technical challenges

• Design, develop, test, and deploy custom middleware solutions, integration proxies, protocol translators, and adapter components that enable legacy applications to authenticate and authorize through the ICAM technical stack when native protocol support is unavailable. • Engineer custom connectors, REST and SOAP APIs, scripts, and integration libraries that facilitate the connection of non-standard applications to Okta IdP and SailPoint IIQ, leveraging existing platform connectors where possible and developing bespoke solutions where they are not. • Analyze legacy application architectures, authentication mechanisms, and data flows to identify integration gaps and design technically sound middleware approaches that bridge proprietary or outdated identity systems with modern SAML, OAuth 2.0, OIDC, and SCIM-based ICAM capabilities. • Develop and maintain reusable integration libraries, sample code repositories, and middleware components that can be leveraged across multiple application enablement efforts to accelerate onboarding velocity and reduce duplicative engineering effort. • Collaborate with migration engineers to support the technical triage of assigned applications, providing middleware feasibility assessments and contributing to the documentation of integration pathways, risk registers, and gap analyses in the Enablement Tracking Database. • Provide technical guidance and engineering support to Application Owners who are undertaking their own integration efforts, including advising on middleware architecture, providing sample code for common integration patterns, and troubleshooting application-side integration failures. • Support the design and implementation of automated provisioning and deprovisioning workflows, including the development of SCIM endpoints, directory synchronization scripts, and lifecycle management hooks for applications that require custom provisioning solutions. • Develop and implement solutions that support the configuration of Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks within target applications, including the development of attribute mapping logic, claims transformation middleware, and authorization policy enforcement components. • Participate in the engineering and development of self-service and automated enablement pathway tooling, contributing reusable middleware components and integration accelerators that simplify the onboarding process for application owners navigating the enablement pipeline independently. • Conduct rigorous unit testing, integration testing, and security testing of all developed middleware solutions prior to deployment, ensuring solutions are functionally correct, secure, and compliant with applicable DoD standards. • Support the testing program by contributing to test plan development, executing technical integration tests, providing sample code and reusable libraries for UAT events, and assisting with defect diagnosis and resolution for middleware-related integration failures. • Ensure all developed middleware, connectors, scripts, and custom tools comply with applicable supply chain risk management requirements per DFARS 239.73, including vetting all third-party code libraries and dependencies to prevent the introduction of cybersecurity vulnerabilities, malicious code, or unauthorized data exfiltration pathways. • Produce and maintain comprehensive technical documentation for all developed middleware solutions, including architecture diagrams, data flow diagrams, API specifications, deployment guides, and operational runbooks. • Contribute to the development and continuous improvement of middleware engineering standards, coding best practices, reusable component libraries, and integration playbooks that drive consistency and quality across the application portfolio. • Ensure all developed solutions comply with Section 508 accessibility standards and applicable DoD security requirements, including CUI handling, OPSEC, and DFARS 252.204-7012. • Maintain current knowledge of evolving middleware technologies, identity integration patterns, and DoD Zero Trust requirements, proactively applying this knowledge to improve the quality and capability of developed solutions.

• Serve as the primary technical SME for the Okta Identity Provider (IdP) platform, including the administration, configuration, and ongoing optimization of Okta Universal Directory, SSO integrations, MFA policies, application integrations, and identity federation services. • Serve as the primary technical SME for SailPoint IdentityIQ (IIQ), including the administration, configuration, and ongoing optimization of identity governance workflows, automated provisioning and deprovisioning, entitlement management, access certification campaigns, and Segregation of Duties (SOD) enforcement. • Design, configure, and deploy application integrations with the Okta IdP using industry-standard protocols including SAML, OAuth 2.0, OIDC, and SCIM. • Design, configure, and deploy application integrations with SailPoint IIQ, including the setup of application connectors, automated provisioning workflows, role and entitlement models, access request processes, and audit reporting capabilities. • Engineer and develop custom connectors, scripts, APIs, and middleware solutions to facilitate the integration of legacy applications that cannot natively support modern identity protocols or standard SailPoint/Okta connectors. • Develop, implement, and sustain the identity protocol connectors and APIs that application owners will use to connect their systems to the ICAM technical stack. • Provide deep technical guidance and platform-specific expertise to migration engineers and application owners throughout the enablement lifecycle. • Support the configuration and management of alternative credential solutions and non-PKI based authentication mechanisms. • Administer and maintain Okta Universal Directory as the Authoritative Directory Aggregator. • Implement and enforce access control models including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) configurations. • Support the establishment and ongoing maintenance of Single Sign-On (SSO) integrations and Active Directory connections. • Monitor platform health, performance, and security across the Okta and SailPoint environments. • Contribute to the development and maintenance of platform runbooks, integration guides, and standard operating procedures. • Support the testing program by developing integration test cases and executing platform-level testing. • Ensure all platform configurations comply with applicable DoD security requirements. • Vet all third-party connectors, scripts, code libraries, and enhancements integrated into the ICAM environment. • Maintain current knowledge of Okta and SailPoint platform updates, new features, and evolving identity standards.