The Identity Access Management SME
Washington DC
6+ Months
PRIMARY RESPONSIBILITIES
IAM Strategy, Architecture, and Engineering
- Serve as the enterprise subject matter expert for IAM architecture and provide technical leadership for identity and access services across the SEC ISS environment.
- Design and implement secure authentication and authorization models using Microsoft Entra ID, Microsoft ICAM, and role-based access controls.
- Lead integration of Entra identity services with Microsoft 365 and enterprise applications to support consistent identity lifecycle and policy enforcement.
- Define IAM standards, patterns, and operating procedures that align with zero-trust principles and federal security requirements.
Identity Governance and Access Control
- Manage joiner/mover/leaver identity lifecycle processes, directory services, and account governance to maintain accurate and timely access provisioning.
- Implement and maintain conditional access policies, multifactor authentication, privileged identity/access management, and identity protection controls.
- Establish and operate access reviews, entitlement management, and governance workflows to enforce least privilege and reduce insider-risk exposure.
- Oversee RBAC design, assignment, and periodic recertification, including automated RBAC processes for consistent policy application.
Compliance, Risk, and Audit Support
- Ensure IAM services support continuing Authorization to Operate objectives through complete, current SOP and control documentation.
- Align IAM controls with NIST, ISO 27001, CISA SCuBA, FISMA, and SEC/OIT security policy requirements.
- Produce technical artifacts and evidence for audit and assessment activities, including FISMA and related internal/external reviews.
- Support remediation planning and corrective actions for IAM-related findings, risks, and control deficiencies.
Operations, Automation, and Stakeholder Engagement
- Lead resolution of complex identity and access incidents, root causes, and recurring control gaps across hybrid enterprise environments.
- Drive automation of identity provisioning, deprovisioning, policy enforcement, and reporting using approved scripting and platform-native capabilities.
- Collaborate with security, cloud, endpoint, and service management teams to implement and sustain identity-dependent controls.
- Provide strategic guidance to government stakeholders on IAM roadmap priorities, modernization sequencing, and operational risk tradeoffs.
REQUIRED QUALIFICATIONS
Education: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field.
Experience:
- Minimum 8 years of deep expertise and experience in identity governance, identity and access management and/or cybersecurity roles supporting enterprise environments.
- Mandatory hands-on experience implementing and operating Microsoft Entra ID (Azure AD) and Microsoft ICAM capabilities.
- Advanced experience with MFA, conditional access, privileged access management, Entra Identity Governance, and integration with Microsoft 365 and enterprise applications.
- Strong understanding of compliance frameworks (NIST, ISO 27001, CISA SCuBA) and zero-trust principles.
Technical Skills (Matrix-Derived Required):
- Microsoft Entra ID (Azure AD) and Microsoft ICAM
- Multifactor authentication (MFA), conditional access, RBAC, and privileged access/identity management (PIM/PAM)
- Entra Identity Governance and identity lifecycle management
- Microsoft 365 and enterprise application identity integration patterns
- Compliance and control frameworks: NIST, ISO 27001, CISA SCuBA
- Zero-trust architecture implementation and policy enforcement
Never miss an opportunity! Create an alert based on the job you applied for.
