FEMA Identity and Access Management (IAM) Modernization

CACI is seeking a Senior Okta Engineer to join our team on a contract supporting the Federal Emergency Management Agency (FEMA) - Office of the Chief Information Security Officer (OCISO), Operations Division. The Senior Okta Engineer is responsible for designing, implementing, and optimizing enterprise identity and access management solutions that support FEMA's mission-critical operations. This role involves strategic planning, technical design, workflow automation, and integration support across FEMA's IAM infrastructure as the agency transitions to Okta-based identity solutions.

What You'll Get to Do:

Your focus will be on Okta platform implementation, ServiceNow integration, identity consolidation, and security enhancements. Responsibilities include:

- Design, develop, and implement Okta workflows and APIs to automate access requests, approvals, provisioning, and deprovisioning for internal and external users

- Integrate Okta with ServiceNow to enable seamless access lifecycle management and approval routing

- Refactor ServiceNow catalog items to leverage Okta APIs and workflows

- Support the transition from FEIMS to Okta as the authoritative source for FEMA identity attributes

- Design and implement attribute management processes, including bulk import templates and standardization of attribute values

- Consolidate identities and eliminate free-form text errors through predefined attribute values

- Extend Multi-Factor Authentication (MFA) implementation across all FEMA applications

- Implement role-based access control (RBAC) solutions aligned with Zero Trust principles

- Support automated attestation campaigns and privileged account reviews to address Notice of Findings and Recommendations (NFRs)

- Develop and maintain comprehensive technical documentation, including integration guides, bulk import templates, and attribute management procedures

- Create standard operating procedures (SOPs) for Okta administration and workflows

- Provide knowledge transfer and training to FEMA staff to ensure sustainability of IAM operations

- Participate in project planning sessions, status meetings, and milestone reviews

- Provide regular progress reports and technical recommendations to client stakeholders

- Acts as a subject matter expert resource to FEMA on Okta processes, workflows, configuration, and implementation best practices

- Collaborates with peers to resolve technical issues and improve IAM solution quality

Requirements:

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field + 15 years of experience

- Experience in Identity and Access Management (IAM)

- Hands-on experience with Okta platform implementation and administration

- **Okta Certified Professional** or **Okta Certified Administrator** (required)

- Demonstrated experience designing and implementing Okta workflows and API integrations

- Strong technical expertise in Okta Universal Directory, Lifecycle Management, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and API Access Management

- Experience integrating Okta with ServiceNow or similar ITSM platforms

- Proficient in RESTful APIs, JSON, and OAuth/OIDC protocols

- Experience with enterprise identity consolidation and migration projects

- Strong understanding of SAML, OAuth 2.0, OIDC, SCIM, and LDAP protocols

- Proficiency in JavaScript, Python, PowerShell, or similar scripting languages

- Knowledge of NIST frameworks, Zero Trust Architecture, RBAC, and federal compliance requirements (FISMA, FedRAMP)

- Excellent communication and collaboration skills to work effectively with clients and cross-functional teams

- Demonstrated experience in federal government or highly regulated environments

- Ability to quickly learn new technologies and adapt to changing requirements

- TS/SCI Clearance

Desired:

- Additional Okta certifications (Okta Certified Consultant, Okta Certified Developer)

- CISSP, CISM, Security+, or other relevant security certifications

- Experience with FEMA systems or Department of Homeland Security (DHS) environment

- Experience with privileged access management (PAM) solutions

- Knowledge of Active Directory, Azure AD, and hybrid identity environments

- Experience with attestation and access certification campaigns

- Previous federal government contracting experience

- Familiarity with Agile/Scrum methodologies

- Experience with Infrastructure as Code (IaC) and DevSecOps practices

- ITIL Foundation certification

What You Can Expect:

 A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is: