Ofertas › Koniag Government Services
Koniag Government Services · United States · Remoto · 100000-115000 USD
Applications for this position will be accepted through 11/15/26 Koniag IT Systems, LLC a Koniag Government Services company, is seeking a NPE Governance Study Lead Engineer (Study 2) with a Secret security clearance to support KITS and our government customer. The position is remote. Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement. Koniag IT Systems, LLC a Koniag Government Services company, is seeking an experienced NPE Governance Study Lead Engineer to support the Department of the Air Force (DAF) in advancing its enterprise Identity, Credential, and Access Management (ICAM) capabilities. This position will lead a comprehensive technical study and engineering analysis effort under Task Order 0003, System Enhancement Studies, with a primary focus on establishing a scalable governance and management framework for Non-Person Entities (NPEs) across the DAF enterprise. The ideal candidate is a technically seasoned identity governance engineer and collaborative leader with deep experience in enterprise ICAM platforms, Zero Trust frameworks, and non-person entity lifecycle management who can translate complex operational requirements into actionable governance frameworks, technical architectures, and implementation roadmaps. Note: This contract is 120 days. All personnel assigned to NPE Governance study activities must hold a final Secret security clearance. The NPE Governance Study Lead Engineer will serve as the primary technical authority for Study 2 of the DAF ICAM System Enhancement Studies effort, leading the analysis, governance framework design, architecture development, and documentation required to produce a decision-ready Technical Study Report within 60 calendar days of Task Order award. The Lead Engineer will coordinate closely with the Program Manager, Identity Architects, Licensing/Cost Analyst, and Government stakeholders to ensure all study outputs are technically sound, policy-compliant, and fully traceable to Performance Work Statement (PWS) Section 4.2 requirements. All work performed under this study will be strictly analytical and planning-focused; no software development, system configuration, or live deployment will be performed under this task. Principal responsibilities will include but are not limited to: Lead the comprehensive review and analysis of all applicable Government-Furnished Information (GFI) and federal references, including the DAF ICAM Integrated NPE and API Management Plan, DAF ICAM NPE Strategy Overview, DAF ICAM NPE Solution Roadmap (CY26–CY27), DoD/DoW X.509 Certificate Policy, NIST SP 800-63, DoDI 8520.04, DoDI 8510.01, CJCSI 6510.01, DAFMAN 17-1304, and DAFGM2025-01. Design and define standardized attribute schemas required to establish a centralized Master Device/Entity Record within the Enterprise Identity Catalog, including standard claims, core NPE identity attributes, unique identifiers, accountability/ownership fields (including the "Babysitter" role), sponsoring organization, environment classification, security classification, lifecycle state, and associated application linkages. Define alignment between NPE attribute schemas and Okta's dual-server authentication architecture, covering the Standard NPE Authentication Server (npe_default / api://npe) and Custom Application Authentication Server schema structures. Develop and document structured naming conventions for NPE identities, coordinating with the DAF Chief Data and Artificial Intelligence Office (CDAO) to support the Master Device/Entity Record naming standard. Develop a detailed, actionable technical plan for discovering existing NPEs across the hybrid DAF enterprise environment and consolidating them into a unified catalog, coordinating with existing enterprise tools and data sources including Azure AD Connect, AWS IAM Inventory, Google Cloud/Cloud One registries, Tenable Nessus, ACAS, Microsoft InTune, ServiceNow CMDB, EITaaS CMDB, and the Service Account Manager listing. Define secure data exchange and synchronization flows with the Attribute Exchange Service (AXS), Active Directory (AREA52), AppGate, Xage, MuleSoft, AI Agent toolsets, UiPath, and the DoD Enterprise Credential Management System (ECMS)/NPE PKI. Define a process for system owners to manually validate automated discovery findings, resolve discrepancies, and enrich raw discovery data with ownership, classification, and environment details. Design proposed governance workflows to manage the full NPE lifecycle within the SailPoint IGA platform, covering all lifecycle states: Request → Approval → Provision → Certification → Deactivation/Revocation. Design accountability and "Babysitter" enforcement controls ensuring every active NPE is linked to an active, accountable personnel record or organizational owner responsible for the identity's activities. Formulate a recurring NPE access recertification process conducted at minimum annually, or at higher frequency based on risk and system owner requirements, directly tied to System Security Plan (SSP) and ATO maintenance. Design governance rules to enforce credential management policies, including transition from password-based to PKI certificate or token-based authentication, 90-day credential rotation enforcement, and storage of physical credentials in accredited enterprise secret vaults with explicit prohibition of hardcoded credentials. Develop a forward-looking, scalable target architecture to guide future NPE capability enhancements, addressing DoD Zero Trust Architecture (ZTA) integration, dynamic access control via Policy Decision Points (PDPs), continuous monitoring and audit compliance via SOC and ELICSAR integration, and User and Entity Behavior Analytics (UEBA)/AI-driven anomaly detection. Define a standardization and rationalization framework leveraging open standards including SPIFFE/SPIRE