IAM Architect

Job Description

Job Description

IAM Architect

Location: Onsite in Washington DC

Duration: 6 month contract, extensions/conversion likely

*CURRENT OR PREVIOUS PUBLIC TRUST CLEARANCE (OR HIGHER) IS REQUIRED*

We are seeking a senior-level Identity Access Management (IAM) Architect to serve as the technical authority for enterprise identity and access management capabilities within a highly regulated federal environment. This individual will lead the design, implementation, and governance of modern IAM frameworks supporting secure authentication, authorization, compliance, and least-privilege access across hybrid cloud and on-premises environments.

This role is heavily focused on architecture, engineering, and strategic IAM leadership rather than program management. The ideal candidate brings deep hands-on expertise with Microsoft Entra ID, Microsoft ICAM, identity governance, privileged access controls, and Zero Trust security principles. The position partners closely with security, infrastructure, cloud, and operations teams to drive IAM modernization, ensure audit readiness, and support enterprise-scale identity services.

Responsibilities:

• Serve as the enterprise subject matter expert and technical lead for Identity and Access Management architecture and services.
• Design and implement secure authentication and authorization solutions leveraging Microsoft Entra ID, Microsoft ICAM, and role-based access control (RBAC).
• Lead integration of identity services with Microsoft 365 and enterprise applications to support identity lifecycle management and policy enforcement.
• Define IAM standards, architectural patterns, and operating procedures aligned with Zero Trust and federal security requirements.
• Manage identity lifecycle processes, including provisioning, deprovisioning, access changes, and account governance.
• Implement and maintain multifactor authentication (MFA), conditional access, privileged identity management (PIM), privileged access management (PAM), and identity protection controls.
• Establish and administer access reviews, entitlement management processes, and governance workflows to enforce least-privilege access.
• Design and oversee RBAC models, access assignments, recertification efforts, and automated access-control processes.
• Support compliance initiatives by creating and maintaining IAM documentation, control evidence, and audit artifacts.
• Assist with audit remediation efforts, corrective action plans, and resolution of IAM-related risks and findings.
• Lead troubleshooting and resolution of complex identity and access issues across hybrid enterprise environments.
• Drive automation of identity provisioning, policy enforcement, reporting, and administrative processes.
• Collaborate with security, cloud, endpoint, and service management teams to implement identity-dependent security controls.
• Provide strategic IAM guidance, roadmap recommendations, and modernization planning to stakeholder groups.

Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field.
• Minimum 8 years of experience in Identity and Access Management, Identity Governance, Cybersecurity, or related enterprise security disciplines.
• Hands-on experience implementing and supporting Microsoft Entra ID (Azure AD) and Microsoft ICAM.
• Advanced experience with MFA, conditional access, RBAC, PIM, PAM, and identity governance solutions.
• Strong expertise in identity lifecycle management, access provisioning, and governance workflows.
• Experience integrating identity services with Microsoft 365 and enterprise applications.
• Strong understanding of Zero Trust architecture and identity-centric security controls.
• Experience supporting compliance and security frameworks including NIST, ISO 27001, CISA SCuBA, and FISMA.
• Ability to obtain and maintain a Public Trust clearance or higher.
• U.S. work authorization meeting contract requirements.

Preferred Qualifications:

• Experience leading IAM modernization initiatives within federal or highly regulated enterprise environments.
• Experience supporting financial regulatory, public sector, or mission-critical organizations.
• Experience implementing phishing-resistant authentication methods and legacy authentication modernization efforts.
• Hands-on experience with IAM automation, scripting, and integration of identity controls into DevSecOps environments.
• Experience supporting audit remediation activities, corrective action plans, and executive-level risk reporting.
• Microsoft Certified: Identity and Access Administrator Associate (SC-300).
• CISSP and/or CISM certification.