Senior ICAM Integration Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the design, execution, and management of enterprise application and service onboarding to Okta and SailPoint platforms, encompassing the setup of SSO integrations, provisioning connectors, access governance policies, and lifecycle management workflows.

• Act as a senior technical authority and subject matter expert on ICAM integration patterns, standards, and best practices, offering guidance to integration teams, application owners, and government stakeholders throughout the onboarding process.

• Design and implement intricate Single Sign-On (SSO) integrations between Okta and enterprise applications utilizing SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and other supported federation protocols, including unique and custom integration scenarios.

• Spearhead the development of sophisticated SailPoint provisioning connectors, integration modules, and custom rules to facilitate automated identity lifecycle management for complex and unconventional application integrations.

• Collaborate with ICAM architects, application owners, development teams, and security personnel to outline integration requirements, formulate integration strategies, and deliver comprehensive integration designs and implementation plans.

• Drive the creation, maintenance, and enforcement of application onboarding standards, integration patterns, reusable integration templates, and best practices to guarantee consistency, quality, and security across the ICAM integration portfolio.

• Lead the configuration and optimization of Okta Lifecycle Management policies, Okta Workflows, and SailPoint provisioning workflows to automate and enhance identity-related processes and event-driven integration scenarios at an enterprise scale.

• Supervise and conduct advanced troubleshooting and root cause analysis for intricate integration issues across Okta and SailPoint environments, devising and implementing solutions that tackle systemic challenges and prevent recurrence.

• Oversee integration testing activities, which include the development of test plans, test cases, and testing frameworks for functional testing, regression testing, and user acceptance testing (UAT) of ICAM integrations.

• Mentor and provide technical guidance to junior and mid-level ICAM integration specialists, conducting code and configuration reviews, sharing knowledge, and promoting the professional development of team members.

• Create and maintain authoritative integration documentation, such as integration architecture documents, data flow diagrams, interface control documents (ICDs), configuration guides, and operational runbooks.

• Keep and continually enhance an accurate and comprehensive application integration catalog, monitoring integration status, protocols, owners, security classifications, and configuration details for all onboarded applications.

• Collaborate with ISSMs, security architects, and compliance teams to ensure all integrations comply with federal security requirements, Zero Trust principles, and ICAM governance standards, contributing to ATO documentation as needed.

• Lead continuous improvement initiatives, identifying and executing opportunities to streamline, automate, and enhance the application onboarding and integration enablement process through tooling, automation, and process optimization.

• Engage directly with government stakeholders and senior leadership to communicate integration strategies, onboarding roadmaps, and technical recommendations through briefings and presentations.

• Participate in and contribute to architecture review boards (ARBs), change control boards (CCBs), and platform governance activities to ensure the security and quality of ICAM integrations across the program.

• Assess and recommend emerging integration technologies, tools, and frameworks, providing informed evaluations of their suitability for adoption within the federal ICAM integration ecosystem.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field from an accredited institution; relevant work experience may be considered in lieu of a degree.

• Over 7 years of hands-on experience in enterprise application integration, identity and access management, or a related technical discipline.

• More than 5 years of hands-on experience integrating applications with Okta and/or SailPoint platforms, including advanced SSO configuration, provisioning connector development, and lifecycle management automation.

• Proven experience in a senior or lead technical capacity, providing guidance and mentorship to integration teams.

• Experience in a federal government IT environment.

• Active Secret Clearance is required.

• Outstanding communication skills in English – both written and verbal – with the capacity to clearly articulate complex integration strategies and technical concepts to both technical teams and non-technical application owners, program managers, and senior government stakeholders.

• Expert-level, hands-on experience configuring and managing Okta application integrations, including advanced SAML 2.0, OAuth 2.0, and OIDC-based SSO integrations, OIN catalog applications, custom application configurations, and non-standard integration scenarios.

• Expert-level, hands-on experience developing and managing SailPoint application integrations, including native connectors, SCIM-based integrations, and advanced custom connector development utilizing the SailPoint connector framework and BeanShell/Java rule development.

• In-depth knowledge of identity federation protocols and standards, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Kerberos, and their advanced application in complex enterprise integration architectures.

• Demonstrated experience leading the design and implementation of enterprise-scale automated provisioning and deprovisioning workflows in Okta and SailPoint, including complex joiner/mover/leaver process automation and event-driven lifecycle management.

• Advanced expertise with Okta Lifecycle Management, Okta Workflows, Okta Identity Engine (OIE), and Okta API Access Management capabilities and their strategic application in enterprise integration ecosystems.

• Advanced expertise with SailPoint provisioning workflows, rules, policies, and role management, including complex BeanShell and Java-based rule development for custom integration logic and workflow automation.

• Expert-level understanding of REST API design and consumption, including experience in developing and troubleshooting API-based integrations and automations within ICAM platform environments.

• Proven ability to lead integration testing activities, including the formulation of comprehensive test plans, test cases, and testing frameworks for complex ICAM integrations.

• Capability to perform advanced analysis of system logs, API responses, audit trails, and diagnostic data to troubleshoot and resolve intricate, high-impact integration issues.

• Experience in creating authoritative technical integration documentation, including architecture documents, interface control documents, and operational runbooks.

• Strong knowledge of Active Directory (AD), Azure Active Directory (AAD/Entra ID), and LDAP directory services and their advanced integration with Okta and SailPoint platforms.

• Comprehensive understanding of federal ICAM frameworks and identity management standards, including FICAM, NIST SP 800-63, NIST SP 800-53, and Zero Trust Architecture principles.

• Proven ability to lead technical teams, mentor junior staff, and drive the delivery of complex integration initiatives in a fast-paced, federal IT environment.

🏝️ Benefits

• Health, dental and vision insurance

• 401K with company matching

• Flexible spending accounts

• Paid holidays

• Three weeks paid time off