Identity and Access Management Lead

Key Responsibilities

• Design and implement a formal RBAC framework across CDM BETSIE and associated environments, including EntraID and AWS
• Establish and enforce least privilege policies in alignment with Zero Trust Architecture principles and federal directives
• Develop and manage identity lifecycle processes for joiners, movers, and leavers across the program, ensuring timely provisioning and deprovisioning
• Implement and manage a Privileged Access Management (PAM) program including identification, governance, and monitoring of privileged accounts
• Lead access review and audit processes to support PAR/RAR reporting requirements and ongoing compliance obligations
• Develop and maintain role-to-privilege mappings and job function definitions across the program to eliminate access ambiguity
• Collaborate with program leadership, system owners, and HR to ensure IAM policies align with organizational changes and personnel transitions
• Produce IAM metrics, reports, and dashboards to communicate access risk and governance posture to program leadership
• Serve as the IAM subject matter expert for CDM program compliance activities, audits, and government stakeholder engagements

Required Skills

• 5+ years of experience in Identity and Access Management in a complex enterprise or federal environment
• Demonstrated expertise with Microsoft EntraID (Azure AD) including conditional access, role assignments, and identity governance
• Strong hands-on experience with AWS IAM, including policies, roles, permission boundaries, and access analysis tools
• Strong knowledge of RBAC design, least privilege principles, and Zero Trust Architecture frameworks
• Experience supporting or implementing PAM solutions and privileged account governance
• Familiarity with CDM program requirements, PAR/RAR processes, and federal ICAM policies
• Experience conducting access reviews, audits, and compliance reporting
• Strong documentation and communication skills with the ability to present complex IAM concepts to both technical and non-technical stakeholders

Desired Skills

• Relevant certifications such as SC-300, AZ-500, AWS Security Specialty, CISSP, or CISM
• Experience with CISA CDM program tools and frameworks
• Prior experience in a federal contractor or agency environment
• Familiarity with NIST SP 800-53, NIST SP 800-207 (Zero Trust), and OMB Memoranda related to identity