Systems Administration – IAM SME – Washington DC

Job Description

Company: Protos IT

Location: Mt Rainier, US

The Identity Access Management SME
Washington DC
6+ Months

PRIMARY RESPONSIBILITIES

IAM Strategy, Architecture, and Engineering

– Serve as the enterprise subject matter expert for IAM architecture and provide technical leadership for identity and access services across the SEC ISS environment.

– Design and implement secure authentication and authorization models using Microsoft Entra ID, Microsoft ICAM, and role-based access controls.

– Lead integration of Entra identity services with Microsoft 365 and enterprise applications to support consistent identity lifecycle and policy enforcement.

– Define IAM standards, patterns, and operating procedures that align with zero-trust principles and federal security requirements.

Identity Governance and Access Control

– Manage joiner/mover/leaver identity lifecycle processes, directory services, and account governance to maintain accurate and timely access provisioning.

– Implement and maintain conditional access policies, multifactor authentication, privileged identity/access management, and identity protection controls.

– Establish and operate access reviews, entitlement management, and governance workflows to enforce least privilege and reduce insider-risk exposure.

– Oversee RBAC design, assignment, and periodic recertification, including automated RBAC processes for consistent policy application.

Compliance, Risk, and Audit Support

– Ensure IAM services support continuing Authorization to Operate objectives through complete, current SOP and control documentation.

– Align IAM controls with NIST, ISO 27001, CISA SCuBA, FISMA, and SEC/OIT security policy requirements.

– Produce technical artifacts and evidence for audit and assessment activities, including FISMA and related internal/external reviews.

– Support remediation planning and corrective actions for IAM-related findings, risks, and control deficiencies.

Operations, Automation, and Stakeholder Engagement

– Lead resolution of complex identity and access incidents, root causes, and recurring control gaps across hybrid enterprise environments.

– Drive automation of identity provisioning, deprovisioning, policy enforcement, and reporting using approved scripting and platform-native capabilities.

– Collaborate with security, cloud, endpoint, and service management teams to implement and sustain identity-dependent controls.

– Provide strategic guidance to government stakeholders on IAM roadmap priorities, modernization sequencing, and operational risk tradeoffs.

REQUIRED QUALIFICATIONS

Education: Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field.

Experience:

– Minimum 8 years of deep expertise and experience in identity governance, identity and access management and/or cybersecurity roles supporting enterprise environments.

– Mandatory hands-on experience implementing and operating Microsoft Entra ID (Azure AD) and Microsoft ICAM capabilities.

– Advanced experience with MFA, conditional access, privileged access management, Entra Identity Governance, and integration with Microsoft 365 and enterprise applications.

– Strong understanding of compliance frameworks (NIST, ISO 27001, CISA SCuBA) and zero-trust principles.

Technical Skills (Matrix-Derived Required):

– Microsoft Entra ID (Azure AD) and Microsoft ICAM

– Multifactor authentication (MFA), conditional access, RBAC, and privileged access/identity management (PIM/PAM)

– Entra Identity Governance and identity lifecycle management

– Microsoft 365 and enterprise application identity integration patterns

– Compliance and control frameworks: NIST, ISO 27001, CISA SCuBA

– Zero-trust architecture implementation and policy enforcement

Source: Adzuna