Identity Access Management Specialist Mid

Description The Identity Access Management Spec Mid supports the SEC ISS contract by implementing and administering enterprise IAM services that secure authentication and authorization across SEC systems. This role manages Microsoft Entra ID capabilities across the full identity lifecycle, including provisioning, role-based access, and policy enforcement to maintain least‑privilege access. The position supports integration with Microsoft 365 GCC and Azure services through MFA, conditional access, and identity governance controls. The specialist also supports Zero Trust and FISMA‑aligned operations by maintaining audit‑ready documentation, enforcing IAM standards, and resolving identity‑related issues in coordination with SEC operations teams. Primary Responsibilities IAM Implementation and Administration Support implementation and day‑to‑day administration of IAM solutions across enterprise platforms. Manage joiner/mover/leaver identity lifecycle activities, including provisioning, deprovisioning, entitlement updates, and directory hygiene. Configure and maintain role‑based access control (RBAC) aligned to approved access policies. Troubleshoot authentication, authorization, and account access issues; perform root‑cause analysis and corrective actions. Access Security and Policy Enforcement Configure and manage MFA, conditional access, and secure authentication controls in Microsoft Entra environments. Assist with enforcement of IAM policies, least‑privilege principles, and segregation of duties across user and workload identities. Administer Entra Identity Governance functions such as access reviews, entitlement management, and identity governance workflows. Support privileged access governance activities and policy updates based on risk, operational changes, and compliance requirements. Microsoft Cloud Identity Integration Support identity integration across Microsoft 365 GCC and Microsoft Azure services to ensure consistent secure access. Coordinate identity dependencies with cloud, endpoint, and enterprise operations teams for service onboarding and changes. Validate identity control implementation for new or modified services, including group‑based access, policy targeting, and exception handling. Contribute to automation of repeatable IAM tasks to improve consistency, scalability, and operational efficiency. Compliance, Audit, and Operational Readiness Maintain SOP‑aligned IAM procedures and documentation to support continuing authorization and annual FISMA review activities. Provide artifacts and evidence for audit readiness, control validation, and remediation tracking. Support Zero Trust control enforcement objectives, including implementation of strong authentication and access controls. Record and track IAM service activities, incidents, and requests in approved ticketing/work management systems. Required Qualifications Citizenship/Work Authorization: Must meet contract requirements. Clearance: Ability to obtain and maintain SEC Public Trust (or higher if required). Education: Bachelor's degree in a relevant field (e.g., Information Technology, Computer Science, Engineering). Experience: At least 4 years of experience in identity and access management (IAM), identity security, or IT security operations. Experience: Strong hands‑on experience with Microsoft Entra ID (formerly Azure AD), including user lifecycle management and RBAC administration. Experience: Experience implementing MFA, conditional access, user provisioning/deprovisioning, Entra Identity Governance, and identity lifecycle controls. Experience: Understanding of compliance requirements and integration with Microsoft 365 services, including support for audit and control documentation in regulated environments. Technical Skills: Microsoft Entra ID (Azure AD) administration Microsoft ICAM concepts and implementation familiarity Multi‑Factor Authentication (MFA) Conditional Access policy configuration and management Role‑Based Access Control (RBAC) Entra Identity Governance (access reviews, entitlement management) Identity lifecycle management (joiner/mover/leaver) Microsoft 365 GCC identity integration IAM workflow automation support Preferred Qualifications Experience supporting IAM services on federal government IT programs. Hands‑on experience with Entra ID Protection, Entra Workload ID, Entra Domain Services, and Entra Verified ID. Experience with Privileged Identity Management (PIM) and advanced least‑privilege design patterns. Experience automating IAM workflows using PowerShell, Microsoft Graph, or similar scripting/API approaches. Familiarity with ServiceNow‑based operations, SLA‑driven support, and audit remediation execution. Microsoft Certified: Identity and Access Administrator Associate (SC‑300) Microsoft Certified: Azure Security Engineer Associate (AZ‑500) CompTIA Security+ Work Environment / Other Operational Support: May require participation in on‑call or surge support activities depending on operational needs. Location: Remote/Telework. Travel: As required per contract direction. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws. #J-18808-Ljbffr