Identity Access Management SME

Primary Responsibilities: IAM Strategy, Architecture, and Engineering - Serve as the enterprise subject matter expert for IAM architecture and provide technical leadership for identity and access services across the SEC ISS environment. - Design and implement secure authentication and authorization models using Microsoft Entra, Microsoft ICAM, and role-based access controls. - Lead integration of Entra identity services with Microsoft 365 and enterprise applications to support consistent identity lifecycle and policy enforcement. - Define IAM standards, patterns, and operating procedures that align with zero-trust principles and federal security requirements. Identity Governance and Access Control - Manage joiner/mover/leaver identity lifecycle processes, directory services, and account governance to maintain accurate and timely access provisioning. - Implement and maintain conditional access policies, multifactor authentication, privileged identity/access management, and identity protection controls. - Establish and operate access reviews, entitlement management, and governance workflows to enforce least privilege and reduce insider-risk exposure. - Oversee RBAC design, assignment, and periodic recertification, including automated RBAC processes for consistent policy application. Compliance, Risk, and Audit Support - Ensure IAM services support continuing Authorization to Operate objectives through complete, current SOP and control documentation. - Align IAM controls with NIST, ISO 27001, CISA SCuBA, FISMA, and SEC/OIT security policy requirements. - Produce technical artifacts and evidence for audit and assessment activities, including FISMA and related internal/external reviews. - Support remediation planning and corrective actions for IAM-related findings, risks, and control deficiencies. Operations, Automation, and Stakeholder Engagement - Lead resolution of complex identity and access incidents, root causes, and recurring control gaps across hybrid enterprise environments. - Drive automation of identity provisioning, deprovisioning, policy enforcement, and reporting using approved scripting and platform-native capabilities. - Collaborate with security, cloud, endpoint, and service management teams to implement and sustain identity-dependent controls. - Provide strategic guidance to government stakeholders on IAM roadmap priorities, modernization sequencing, and operational risk tradeoffs. Required Qualifications - Citizenship/Work Authorization: Must meet contract requirements. - Clearance: Ability to obtain and maintain SEC Public Trust (or higher if required). - Education: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field. Experience: - Minimum 8 years of experience in identity and access management and/or cybersecurity roles supporting enterprise environments. - Mandatory hands-on experience implementing and operating Microsoft Entra (Azure AD) and Microsoft ICAM capabilities. - Advanced experience with MFA, conditional access, privileged access management, Entra Identity Governance, and integration with Microsoft 365 and enterprise applications. - Strong understanding of compliance frameworks (NIST, ISO 27001, CISA SCuBA) and zero-trust principles.