Key Role:

Apply  expertise in Cybersecurity Identity and Access Management (IAM) to analyze, design, and support a continuous monitoring solution to verify and validate appropriate user privileges, assigned credentials, trustworthiness, appropriate user security behavior training, and appropriately granted resource access rights to users. Engage multiple stakeholders and leverage related security products or technologies to recommend solution architectures and designs needed to monitor and report on IAM related data across multiple government agencies. Integrate disparate IAM data from multiple sources into a singular database for correlation and presentation. Maintain responsibility for articulating and authoring multiple findings, recommendations, and other artifacts, including interfacing with key stakeholders to implement tailored IAM solutions. Work with architects, SMEs, and other engineers and provide work leadership to junior employees, as needed. This position is open to remote delivery from any location in the U.S., to include the District of Columbia.

Basic Qualifications:

• 3+ years of experience with IT, including one of the following areas: supporting access management solutions, including user privileges management, user credential management, or user security related behavior monitoring

• 3+ years of experience with requirements, design, implementation, integration, testing, or change management

• 3+ years of experience with COTS IAM tools, including CyberArk, Broadcom Layer 7/ CA PAM, Centrify, or BeyondTrust

• 1+ years of experience with implementing IAM tools in an enterprise environment

• Knowledge of the following areas: Active Directory or LDAP management, configuration or design, PKI, X509, SSO across multiple domains, 2FA via PIV or CAC, or scripting and coding

• Ability to obtain a security clearance

• BA or BS degree

Additional Qualifications:

• Experience with SailPoint and Saviynt

• Experience with supporting IAM in a Cloud environment, including Azure or AWS

• Experience with SQL database administration or management

• Experience with a SIEM tool, including Splunk or the ELK stack

• Experience with authoring Cybersecurity guidance, including policies, strategies, and whitepapers

• Experience with implementing PKI and PIV standards

• Experience with HSPD-12, FIPS 201-2, FICAM, OMB 11-11, FedRAMP, PCI, FISMA, or NIST 800-53, 800-63, 800-79-2, or 800-157 policies and standards a plus

• Knowledge of HTTP, XML, REST, JSON a plus

• BS degree in Information Technology, Information Systems, or Computer Science

Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

We’re an EOE that empowers our people—no matter their race, color, religion, sex, gender identity, sexual orientation, national origin, disability, veteran status, or other protected characteristic—to fearlessly drive change.