IAM Subject Matter Expert

Job Description

Position: IAM Subject Matter Expert

\n

Location: Suitland, MD – Hybrid

\n

Duration: 6 Months Contract-to-Hire

\n

\n

Overview:

\n

Seeking a senior IDMS/IAM SME to support enterprise identity, directory, authentication, authorization, federation, and access-management modernization for a federal environment. The role will focus on Microsoft Active Directory/Entra ID, SSO, MFA, Zero Trust, cloud, mobile, and application integrations.

\n

\n

Key Responsibilities:

\n

\n
• Lead enterprise IAM architecture, engineering, integration, modernization, and troubleshooting.

\n

• Assess current-state environments and develop target-state/transition architectures.

\n

• Design and support SSO, federation, MFA, RBAC, authentication, authorization, and identity lifecycle management.

\n

• Integrate Microsoft Entra ID/Intune with applications, APIs, cloud platforms, UEM, and security services.

\n

• Support identity solutions for mobile/field environments and device-based access.

\n

• Work with SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, PKI, PIV/CAC, and certificate-based authentication.

\n

• Define least-privilege, privileged access, service-account, and Zero Trust models.

\n

• Troubleshoot complex authentication, authorization, provisioning, federation, and directory issues.

\n

• Develop architecture diagrams, technical standards, integration specifications, and documentation.

\n

• Collaborate with architecture, cybersecurity, cloud, application, infrastructure, and operations teams.

\n

\n

\n

Requirements:

\n

\n
• 8+ years of enterprise IAM/IDMS, directory services, identity engineering, or cybersecurity experience.

\n

• Strong hands-on experience with Active Directory and Microsoft Entra ID.

\n

• Strong knowledge of SAML, OAuth 2.0, OIDC, LDAP, MFA, SSO, RBAC, federation, and IAM lifecycle management.

\n

• Experience with enterprise, cloud/hybrid, mobile, and application IAM integrations.

\n

• Knowledge of Zero Trust, least privilege, device identity, and risk-based authentication.

\n

• Experience troubleshooting complex identity/access issues.

\n

• Working knowledge of NIST security controls and federal cybersecurity environments.

\n

• Strong communication and technical documentation skills.

\n

\n

\n

Preferred:

\n

\n
• Okta, NetIQ/OpenText Identity Manager, Microsoft Intune.

\n

• PIV/CAC, PKI, AWS GovCloud or Azure Government.

\n

• PowerShell, Python, Java, REST APIs, or identity automation.

\n

• ServiceNow/ITIL experience.

\n

• Relevant IAM, Microsoft, cloud, or cybersecurity certifications.

\n

\n