IAM Subject Matter Expert

Location: Suitland, MD – Hybrid

Duration: 6 Months Contract-to-Hire

Overview: Seeking a senior IDMS/IAM SME to support enterprise identity, directory, authentication, authorization, federation, and access-management modernization for a federal environment. The role will focus on Microsoft Active Directory/Entra ID, SSO, MFA, Zero Trust, cloud, mobile, and application integrations.

Key Responsibilities: Lead enterprise IAM architecture, engineering, integration, modernization, and troubleshooting. Assess current-state environments and develop target-state/transition architectures. Design and support SSO, federation, MFA, RBAC, authentication, authorization, and identity lifecycle management. Integrate Microsoft Entra ID/Intune with applications, APIs, cloud platforms, UEM, and security services. Support identity solutions for mobile/field environments and device-based access. Work with SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, PKI, PIV/CAC, and certificate-based authentication. Define least-privilege, privileged access, service-account, and Zero Trust models. Troubleshoot complex authentication, authorization, provisioning, federation, and directory issues. Develop architecture diagrams, technical standards, integration specifications, and documentation. Collaborate with architecture, cybersecurity, cloud, application, infrastructure, and operations teams.

Requirements: 8+ years of enterprise IAM/IDMS, directory services, identity engineering, or cybersecurity experience. Strong hands-on experience with Active Directory and Microsoft Entra ID.Strong knowledge of SAML, OAuth 2.0, OIDC, LDAP, MFA, SSO, RBAC, federation, and IAM lifecycle management. Experience with enterprise, cloud/hybrid, mobile, and application IAM integrations. Knowledge of Zero Trust, least privilege, device identity, and risk-based authentication. Experience troubleshooting complex identity/access issues. Working knowledge of NIST security controls and federal cybersecurity environments. Strong communication and technical documentation skills.

Preferred: Okta, NetIQ/OpenText Identity Manager, Microsoft Intune. PIV/CAC, PKI, AWS GovCloud or Azure Government. PowerShell, Python, Java, REST APIs, or identity automation.

Service: Now/ITIL experience. Relevant IAM, Microsoft, cloud, or cybersecurity certifications.