Identity Federation, PKI Engineer

Koniag Government Services

. Support enterprise identity and access management operations for a federal government client .

Posted 10/23/2026full-timeUnited StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Identity and Access Management (IAM) with a focus on federated identity solutions, enterprise PKI, and secure API authorization. Proficient in implementing and troubleshooting identity topologies while ensuring compliance with federal standards and security protocols.

Highest-signal resume keywords

Identity And Access Management (IAM)Federated Identity SolutionsPing Identity Product SuitesOAuth 2.0SAML 2.0

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Federation ConnectionsAPI Authorization MechanismsCertificate Lifecycle ManagementFIDO2/WebAuthnMicrosoft Active Directory Certificate Services (ADCS)PowerShellPythonBashSAML Assertions DecodingOIDC JWT Tokens

Tools & Technologies

Ping IdentityOktaMicrosoft EntraAzure Key VaultPostman

Industry Keywords

FIPS 140-3Executive Order 14028NIST SP 800-63-3FICAM ProfilesPublic Trust

Tech Stack

Tools & technologies

AzureCloudCyber SecurityPythonRealmVault

About the role

Key responsibilities & impact

Support enterprise identity and access management operations for a federal government client
Design, build, and maintain enterprise federation connections using SAML, OAuth 2.0, and OIDC
Configure, optimize, and troubleshoot identity topologies using Ping Identity, Okta, and Microsoft Entra
Implement secure API authorization mechanisms and custom OAuth token attributes and claims
Support passwordless and phishing-resistant authentication using FIDO2/WebAuthn
Manage enterprise certificate lifecycles, certificate authorities, registration authorities, CRLs, and OCSP
Integrate federal PKI PIV/CAC cards with cloud identity providers for derived credentials and MFA
Maintain PKI HSMs and software systems in alignment with FIPS 140-3
Troubleshoot certificate validation, trust chains, and cross-realm trust configurations
Support Azure Key Vault, key management systems, and post-quantum cryptography initiatives
Facilitate SCIM and just-in-time provisioning between Ping, Okta, and Microsoft Entra
Configure conditional access, risk-based authentication, and step-up authentication policies
Document architectures, engineering designs, security controls, and deployment cookbooks
Automate federation deployments and infrastructure-as-code identity configurations through DevSecOps pipelines
Develop and execute test plans and summaries covering federation flows, token security, certificate rollouts, and disaster recovery failover

Requirements

What you’ll need

U.S. Citizen
Bachelor's Degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or a related field
6–10+ years of engineering experience focused on Identity and Access Management (IAM) and network security
Minimum of 4 years of hands-on experience configuring and supporting federated identity solutions and enterprise PKI
Advanced engineering proficiency with Ping Identity product suites, Okta, and Microsoft Entra
Deep knowledge of OIDC, OAuth 2.0, SAML 2.0, and FIDO/WebAuthn
Hands-on experience with Microsoft Active Directory Certificate Services (ADCS) or commercial PKI software platforms such as DigiCert or Entrust
Strong understanding of Executive Order 14028, NIST SP 800-63-3, and FICAM profiles
Experience with PowerShell, Python, Bash, or Postman
Ability to decode SAML assertions and OIDC JWT tokens and trace network/HTTPS handshakes
Ability to obtain and maintain a Public Trust

Benefits

Comp & perks

Medical, dental, and vision insurance
401(k) retirement plan
Paid time off
Paid parental leave
Life and disability insurance
Flexible spending accounts
Commuter benefits
Tuition reimbursement
Hybrid work opportunity