IAM Senior Specialist

### Position Overview The Identity Access Management Specialist Senior supports SEC OIT by designing, implementing, and operating enterprise identity and access capabilities across cloud and enterprise environments. This role leads hands-on engineering and sustainment of Microsoft Entra (Azure AD) and Microsoft ICAM-aligned solutions to ensure secure authentication, authorization, and lifecycle identity management. The position is responsible for enforcing Zero Trust access controls, including MFA, conditional access, RBAC, and privileged access governance. ### Primary Responsibilities **Identity Platform Engineering** - Design, implement, and manage enterprise IAM architecture supporting secure authentication and authorization across SEC systems. - Administer Microsoft Entra services, including Entra ID and Entra Identity Governance, and related identity components. - Implement and maintain identity lifecycle processes (joiner/mover/leaver), directory services, and secure account provisioning/deprovisioning. - Lead IAM integration with enterprise applications and cloud services to deliver scalable, policy-driven access. **Access Governance and Privileged Access Management** - Implement and manage role-based access control (RBAC) to enforce least-privilege access. - Configure and maintain MFA, conditional access policies, and privileged access management controls. - Support governance workflows to sustain access appropriateness and policy compliance. - Oversee policy enforcement for group management, account changes, and access expiration activities. **Zero Trust Security and Operations** - Apply Zero Trust identity controls in alignment with SEC ISS requirements and federal guidance, including OMB M-22-09 principles. - Support secure authentication modernization and removal of legacy methods. - Coordinate with infrastructure, endpoint, and security teams to validate device/user compliance. - Provide advanced troubleshooting for complex authentication, authorization, and federation/integration issues. **Compliance, Audit, and Service Delivery** - Maintain IAM SOPs, runbooks, and technical documentation to support ATO sustainment. - Support audit activities by producing control artifacts and resolving findings. - Monitor IAM platform health, service performance, and security events. ### Required Qualifications - **Education:** Bachelors in a relevant field (e.g., Information Technology, Computer Science, Engineering). - **Experience:** Minimum 8 years in IAM or cybersecurity roles. - **Technical Expertise:** Mandatory hands-on experience with Microsoft Entra (Azure AD) and Microsoft ICAM solutions. - **Skills:** Implementation of identity governance, MFA, conditional access, RBAC, and enterprise application integration. - **Compliance:** Knowledge of NIST, CISA SCuBA, and ISO 27001 frameworks.