ICAM Lead / Identity & Access Management Architect

Role overview Provide technical leadership for identity, credential, and access management across a large, multi-site federal enterprise. The work spans identity architecture and operations, with an emphasis on Zero Trust alignment, secure authentication, privileged access, and expanding single sign-on and federation across applications.

Responsibilities - Implement and sustain enterprise ICAM controls in line with Zero Trust principles and relevant NIST and CISA guidance. - Design identity proofing and authentication capabilities to NIST SP 800-63-3 identity and authentication assurance levels. - Oversee privileged access management administration and policy. - Expand SSO and federation integrations across the application portfolio, including connections to government-wide identity providers. - Lead identity governance processes, including access reviews and identity lifecycle management. - Coordinate with identity operations and Zero Trust stakeholders, support security audits, and provide architectural guidance and mentorship.

Requirements - At least 7 years of IAM experience in federal or other large enterprise environments. - Bachelor’s degree in computer science, information technology, cybersecurity, or a related field; equivalent experience may substitute. - Deep knowledge of IAM/ICAM platforms, SAML, OIDC, OAuth, and privileged access management. - Experience with identity governance and administration tools and processes. - CISSP certification.

Nice to have - A vendor-specific IAM certification, such as Okta, SailPoint, or CyberArk.

Benefits and work setup - The source gives a base pay range of $109,500–$224,200 for a specified set of US states and the District of Columbia. Pay varies by location, skills, and experience.