Overview
Skills
Job Details
Title: Security Mgt Specialist
Location :Culpeper, VA
Description
- We are looking for an experienced Business Analyst with a strong background in Identity and Access Management (IAM).
- The analyst will serve as a critical link between business stakeholders and technical teams, translating complex requirements into practical solutions.
- A key focus will be redefining IAM policies and controls to align with Zero Trust principles, security standards, and compliance needs.
The analyst must have a solid understanding of identity, authentication, authorization, and user lifecycle management, including SSO, MFA, conditional access, and threat modeling. Experience in writing translating security, compliance, and user experience requirements into clear business and technical policies, this includes in writing functional specifications, developing test cases, and supporting implementation and validation efforts is essential. Lead change management efforts, including training and communication. This is a strategic role that requires both technical insight and business to drive effective IAM solutions across the organization.
Requirements:
- Proven experience as a Business Analyst with a focus on Identity and Access Management (IAM).
- Strong understanding of IAM concepts, including authentication, authorization, user lifecycle management, SSO, MFA, conditional access, and threat modeling.
- Experience developing and documenting IAM policies, controls, and attribute- / role-based access models.
- Strong communication and stakeholder management skills, with the ability to work across business and technical teams.
- Experience working with Identity Providers such as Entra ID (formerly Azure AD) and Ping Identity.
- Familiarity with modern identity protocols such as SAML, OAuth, OpenID Connect (OIDC), SCIM, and LDAP.
- Understanding of Privileged Access Management (PAM) solutions, including Delinea and HashiCorp Vault.
Specific Skills
Identity Access Controls
Project Management
Security Control Frameworks
Zero Trust Controls
Communications
Reporting