Migration Engineer

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Act as a hands-on technical contributor tasked with implementing the integration and onboarding of NIPRNet applications onto a unified ICAM technical stack.

• Provide direct support for the Department of Defense (DoD) Zero Trust Execution Roadmap.

• Deliver integration solutions that are technically sound, secure, and compliant, while ensuring accurate documentation and status reporting throughout the enablement process.

• Carry out the technical integration of designated NIPRNet applications into the ICAM technical stack.

• Perform comprehensive technical assessments of assigned applications, evaluating each application's current identity state, identifying integration gaps, documenting risks, and determining the suitable enablement pathway.

• Collaborate with internal engineers, integration specialists, and the Migration Team Lead to address complex technical issues.

⛳️ Requirements

• A Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field from an accredited institution.

• At least 4 years of hands-on experience in information technology, including a minimum of 2 years of direct experience in identity and access management, enterprise application integration, or related cybersecurity fields.

• Proven experience in configuring and troubleshooting SSO integrations using SAML, OAuth 2.0, or OIDC within an enterprise setting.

• Experience with Identity Provider (IdP) or Identity Governance and Administration (IGA) platforms in a technical integration role.

• Must possess an active Secret clearance and be able to meet the requirements for CAC-card issuance and NIPRNet access, including annual DoD CyberAwareness training and certification.

• Strong technical communication skills in English—both written and verbal—with the capability to clearly articulate complex integration concepts to both technical engineers and non-technical application owners.

• Practical experience configuring Okta for SSO, MFA, and application integration, including work with Okta application integrations, Universal Directory, and identity federation.

• Hands-on experience with SailPoint IdentityIQ (IIQ), including configuring connectors, managing automated provisioning and deprovisioning workflows, entitlement management, and access certification.

• Knowledge and practical implementation experience with SAML, OAuth 2.0, OIDC, and SCIM identity protocols.

• Experience in developing custom integration solutions such as scripts, connectors, APIs, or middleware to link legacy applications with modern identity platforms.

• Familiarity with Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) design and implementation principles.

• Experience supporting or performing User Acceptance Testing (UAT), including developing test cases, tracking defects, and providing resolution support.

🏝️ Benefits

• Health, dental, and vision insurance

• 401K with company matching

• Flexible spending accounts

• Paid holidays

• Three weeks paid time off

• Additional benefits