IAM Subject Matter Expert

Position: IAM Subject Matter Expert

Location: Suitland, MD – Hybrid

Duration: 6 Months Contract-to-Hire

Overview:

Seeking a senior IDMS/IAM SME to support enterprise identity, directory, authentication, authorization, federation, and access-management modernization for a federal environment. The role will focus on Microsoft Active Directory/Entra ID, SSO, MFA, Zero Trust, cloud, mobile, and application integrations.

Key Responsibilities:

• Lead enterprise IAM architecture, engineering, integration, modernization, and troubleshooting.
• Assess current-state environments and develop target-state/transition architectures.
• Design and support SSO, federation, MFA, RBAC, authentication, authorization, and identity lifecycle management.
• Integrate Microsoft Entra ID/Intune with applications, APIs, cloud platforms, UEM, and security services.
• Support identity solutions for mobile/field environments and device-based access.
• Work with SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, PKI, PIV/CAC, and certificate-based authentication.
• Define least-privilege, privileged access, service-account, and Zero Trust models.
• Troubleshoot complex authentication, authorization, provisioning, federation, and directory issues.
• Develop architecture diagrams, technical standards, integration specifications, and documentation.
• Collaborate with architecture, cybersecurity, cloud, application, infrastructure, and operations teams.

Requirements:

• 8+ years of enterprise IAM/IDMS, directory services, identity engineering, or cybersecurity experience.
• Strong hands-on experience with Active Directory and Microsoft Entra ID.
• Strong knowledge of SAML, OAuth 2.0, OIDC, LDAP, MFA, SSO, RBAC, federation, and IAM lifecycle management.
• Experience with enterprise, cloud/hybrid, mobile, and application IAM integrations.
• Knowledge of Zero Trust, least privilege, device identity, and risk-based authentication.
• Experience troubleshooting complex identity/access issues.
• Working knowledge of NIST security controls and federal cybersecurity environments.
• Strong communication and technical documentation skills.

Preferred:

• Okta, NetIQ/OpenText Identity Manager, Microsoft Intune.
• PIV/CAC, PKI, AWS GovCloud or Azure Government.
• PowerShell, Python, Java, REST APIs, or identity automation.
• ServiceNow/ITIL experience.
• Relevant IAM, Microsoft, cloud, or cybersecurity certifications.