Identity and Access Management Specialist

About the role

You know that the user is the last frontier for cybersecurity. It’s where the perimeter is drawn, and securing identities is pivotal in the fight against cybercriminals. As an Identity and Access Management (IAM) specialist, you have the skills and experience to keep hackers from taking data and breaking processes. We’re looking for someone like you to help our clients meet their missions without disruption. As an IAM engineer at Booz Allen, you’ll play a critical role in the world of identity and access management and zero trust. In this role, you’ll support large-scale IAM projects for our clients. You’ll interface with stakeholders and engineering teams to delve into the details and dependencies of critical processes and users’ roles within them. You’ll analyze the identity lifecycle, articulating access requirements and defining enterprise identity records. You’ll use your experience in IAM to design, deploy, and support systems that verify appropriate user privileges and manage credentials for accessing our clients’ most valuable assets. From single sign-on to privileged access systems, you’ll have the chance to implement enterprise-class solutions and stop adversaries in their tracks. Join us. The world can’t wait.

Responsibilities

• Support large-scale IAM projects for our clients.
• Interface with stakeholders and engineering teams to delve into the details and dependencies of critical processes and users’ roles within them.
• Analyze the identity lifecycle, articulating access requirements and defining enterprise identity records.
• Use your experience in IAM to design, deploy, and support systems that verify appropriate user privileges and manage credentials for accessing our clients’ most valuable assets.
• From single sign-on to privileged access systems, implement enterprise-class solutions and stop adversaries in their tracks.

Requirements

• Experience with Delinea Secret Server or PAM tools for managing privileged access.
• Experience with engineering and customizing workflows within Delinea Secret Server, including defining roles, permissions, and automated access policies.
• Experience installing, configuring, managing, and troubleshooting Delinea Secret Server to ensure optimal performance and reliability.
• Knowledge of integrating Delinea Secret Server with IAM/PAM tools, authentication protocols such as SSO, MFA, LDAP, and Active Directory, and cloud platforms such as AWS and Azure.
• Knowledge of role-based access controls, credential rotation, and privileged session monitoring.
• Ability to troubleshoot, support and optimize Delinea infrastructure and integrations.
• Ability to design and implement secure workflows and access policies aligned with least privilege principles.
• TS/SCI clearance.
• HS diploma or GED.
• Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Preferred Qualifications

• Experience architecting and deploying Delinea Secret Server, CyberArk, or BeyondTrust PAM including vault configuration, role-based access controls, automated password rotation, API integrations for seamless workflow automation, and designing high availability (HA) architectures for mission-critical environments.
• Experience with identity governance processes and entitlement management programs.
• Knowledge of system, network, application, and security architectures, cybersecurity solutions, key cyber processes such as incident handling, risk measurement, and change management, and key cyber threats, including nation state actors, malware or ransomware, command and control infrastructures, and mitigations.
• TS/SCI clearance with a polygraph.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave.
• Professional development