Identity, Credential, and Access Management (ICAM) Analyst
On-siteArlington, Virginia, United States
Job Summary
Provide recommendations on ICAM standards, policies, and technical implementations for program members. Translate complex technical issues to high-level messages for non-technical stakeholders and facilitate meetings with program and client teams to drive future-state capabilities. Support governance for MFA, Encryption, and Automated Dynamic Access Control while recommending lifecycle management for emerging technologies. Work cross-functionally with internal and external stakeholders to execute a strategic ICAM roadmap, author Knowledge Base articles, and perform risk management activities. Collaborate with vendors to ensure product alignment with ICAM ZTA roadmaps and presidential directives.
Required Qualifications
- Secret Clearance
- Experienced Professional with combined 15+ years within the fields of Information Security and Identity & Access Management with regards to developing, implementing, and overseeing the protection of information, information systems and (IT) requirements
- 5+ years of experience on working in any major cloud (Azure, AWS or like) services and proficient with Cloud technologies
- Knowledge of and experience with architecting solutions adhering to Federal Identity, Credential, and Access Management (FICAM) policies, directives, and standards
- Knowledge of IAM and ICAM policies and standards (e.g., HSPD-12, FIPS 201, NIST- 800-63, and NIST SP 800-53 Rev 5)
- Understanding of ICAM as a foundational element of a Zero Trust architecture
- Knowledge of implementing IAM tools in an enterprise environment
- Knowledge of Active Directory (AD), Azure AD, AD Federated Services (ADFS), common ICAM standards (e.g. OAuth 2.0, OIDC, SAML, SCIM, FIDO2, XACML, Attribute and Role based access control (ABAC and RBAC)), multi-factor authentication solutions (AAL2 and AAL3), single sign on, entitlement management
- Familiar with Azure DevSecOps tools and processes
- Has hands-on experience managing or supporting complex technical ICAM implementations, and experience with Federal Public Key Infrastructure (FPKI)
- Experience working directly on large scale ICAM implementations, with a strong understanding of the DOD ICAM Strategy, the Federal ICAM (FICAM) Architecture, and service level strategies & Federal Public Key Infrastructure (FPKI) concepts and their relationship to PIV, derived PIV, and Azure AD CBA
- Strong understanding Azure AD concepts, i.e. enterprise applications, application registrations, managed identities, and service principals; conditional access framework, authentication strengths, and their relationship to NIST (e.g. 800-63B); SCIM and Azure AD User Provisioning; and deploying Identity Experience Framework (IEF) policies
Desired Qualifications
- Ability to see the big picture and lead the team with a detailed task level aligned with the big picture
- Strong oral and written communication skills with the ability to tailor your messaging to technical and non-technical audiences
- Proficient to handle multi-tasking and ability to prioritize (teams) tasks independently based on organizations priorities
- Ability to manage various stakeholders (technical and non-technical) and collaborate with others to achieve common goals
- Experience working using agile methods and scrum process
- Demonstrated ability to understand complex technical issues at a high-level and communicate them to non-technical stakeholders
- Excellent diagnostic, critical thinking, and analytical skills
- Ability to understand CC/S/A challenges and identify and recommend appropriate strategies and technical solutions
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.