IDAM Architect, Lead

Job Number: R0247756

About the role

The user is the last frontier for cybersecurity. It’s where the perimeter is drawn, and securing identities is pivotal in the fight against cybercriminals. As an Identity and Access Management (IAM) Engineer at Booz Allen, you will play a critical role in the world of Identity and Access Management (IAM). In this role, you’ll support large-scale IAM projects for our government clients. You’ll analyze the identity lifecycle, articulate access requirements, and define enterprise identity records. You’ll expand your IAM experience to design, deploy, and support systems that verify appropriate user privileges and manage credentials for accessing our clients’ most valuable assets. From single sign-on to privileged access systems, you’ll implement enterprise-class solutions and help stop adversaries in their tracks.

Requirements

• 7+ years of experience with IT, including managing and designing access management solutions, connector and systems integrations, entitlements management, user credential management, or user security behavior monitoring
• 5+ years of experience with Cyber Security in the IDM Domain
• 4+ years of experience in project management, product ownership including Agile methodologies, backlog and schedule management, complex problem resolution, or performance management
• Experience architecting perimeter-less identity networks using DoD Zero Trust Reference Architecture principles
• Experience structuring secure Active Directory, Entra ID, and LDAP environments across NIPRNet and SIPRNet
• Experience with IGA platforms like SailPoint, Okta, and Saviynt and automation of access certifications and Separation of Duties (SoD) processes
• Experience integrating an ICAM Technology stack with SIEM and UEBA telemetry to trigger dynamic step-up authentication based on continuous monitoring
• Knowledge of enterprise frameworks with FICAM, STIGs, NIST SP 800-53, and HSPD-12 mandates
• Secret clearance
• HS diploma or GED

Nice to have

• Experience applying expertise in advisory project management in an IT environment
• Experience with Public Key Infrastructure (PKI) and Single Sign On (SSO)
• Experience with COTS IAM tools such as MSFT AD, MSFT ADCS, Keyfactor PKI, and RSA Tokens
• Experience supporting enterprise IAM solution delivery projects
• Knowledge of designing Zero Trust security architecture
• Knowledge of HTTP, XML, REST, Python, or JSON

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Benefits

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include:

• Health, life, disability, financial, and retirement benefits
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care
• Recognition awards program acknowledging employees for exceptional performance and superior demonstration of our values

Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Pay

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).

Schedule

This posting will close within 90 days from the Posting Date.

Work Model

Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.