- Where
- Washington, DC, US · Remote · Remote
- Level
- Mid
Applications for this position will be accepted through 11/16/26
Koniag IT Systems, LLC a Koniag Government Services company, is seeking a Microsoft Identity SME with a Secret security clearance to support KITS and our government customer. The position is remote.
Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement.
KITS, a Koniag Government Services company, is seeking an experienced Microsoft Identity Subject Matter Expert (SME) to support the Department of the Air Force (DAF) in advancing its enterprise Identity, Credential, and Access Management (ICAM) capabilities. This position will provide dedicated Microsoft identity platform expertise across three concurrent System Enhancement Studies under Task Order 0003, covering Contested, Degraded, and Operationally Limited (CDO-L) ICAM environments, Non-Person Entity (NPE) Governance and Management, and the DAF365 Joiner, Mover, Leaver (JML) Transformation Framework. The ideal candidate is a technically seasoned Microsoft identity engineer with deep hands-on experience across Microsoft Entra ID, Active Directory, Microsoft 365, and related Microsoft identity and access management technologies, with a strong understanding of how these platforms integrate within the broader DAF ICAM enterprise stack including Okta and SailPoint.
*Note – This is for a 120-day study. All personnel assigned to this effort must hold a final Secret security clearance. This position is Remote.
The Microsoft Identity SME will serve as the primary technical authority on Microsoft identity platform architecture, integration, and configuration requirements across all three studies within the DAF ICAM System Enhancement Studies effort. Working in close coordination with the Program Manager, Study Lead Engineers, and Identity Architects, the Microsoft Identity SME will ensure that all architectural recommendations, integration designs, provisioning workflows, and implementation roadmaps involving Microsoft platforms are technically accurate, aligned to current Microsoft Entra ID capabilities and product roadmap, and practically implementable within the DAF enterprise environment. The Microsoft Identity SME will contribute substantive Microsoft platform technical content to each study's Technical Study Report and will serve as the authoritative reference point for all Microsoft identity platform questions arising during the study period.
Principal responsibilities will include but are not limited to:
Serve as the authoritative Microsoft identity platform technical reference across all three System Enhancement Studies, ensuring that all architectural recommendations and integration designs involving Microsoft technologies are grounded in current platform capabilities, current licensing structures, and near-term product roadmap inputs.
Provide Microsoft identity platform guidance to the CDO-L Study Lead Engineer to support the architectural analysis of edge identity node deployment options, evaluating how Microsoft identity components interact with proposed edge identity broker architectures in disconnected and intermittently connected NIPRNet and SIPRNet environments.
Assess and document the behavior of Microsoft Entra ID and Active Directory in degraded, limited bandwidth, and fully denied connectivity states, including cached credential validation behavior, Kerberos ticket lifetime management, and the interaction between on-premises Active Directory domain controllers and cloud-based Entra ID authentication flows during connectivity interruptions.
Define the Microsoft platform configuration requirements necessary to support CDO-L edge identity caching and synchronization architectures, including Azure AD Connect configuration for hybrid identity synchronization, domain controller placement considerations for forward-deployed nodes, and Group…