IAM Lead - Remote/Arlington, Zero Trust & PAM Expert

ECS; Arlington (VA); Hybrid; USD 126,000 - 189,000; Full time

Job summary

Everforth ECS in Arlington, VA is seeking an Identity and Access Management Lead to design and govern enterprise IAM across CDM BETSIE, EntraID, and AWS.

You will implement a formal RBAC framework, enforce least privilege per Zero Trust and federal directives, and manage identity lifecycles for joiners, movers, and leavers. The role collaborates with program leadership, HR, and system owners, and produces IAM metrics for governance reporting.

Qualifications

• 5+ years of IAM in a complex enterprise or federal environment.
• Expertise with Microsoft EntraID (Azure AD) including conditional access and identity governance.
• Hands-on AWS IAM with policies, roles, permission boundaries, and access analysis tools.
• Strong RBAC design, least privilege principles, and Zero Trust Architecture frameworks.
• Experience supporting or implementing PAM solutions and privileged account governance.
• Familiarity with CDM program requirements, PAR/RAR processes, and federal ICAM policies.
• Experience conducting access reviews, audits, and compliance reporting.
• Strong documentation and communication skills to present IAM concepts to stakeholders.

Responsibilities

• Design and implement a formal RBAC framework across CDM BETSIE and EntraID/AWS.
• Enforce least privilege per Zero Trust and federal directives.
• Develop and manage identity lifecycle for joiners, movers, leavers.
• Lead PAM program governance and privileged accounts monitoring.
• Lead access reviews and PAR/RAR reporting.
• Maintain role-to-privilege mappings and job function definitions.
• Collaborate with program leadership, system owners, HR on IAM policies.
• Produce IAM metrics, reports, and dashboards for leadership.
• Serve as IAM SME for CDM compliance and government engagements.

Skills

Identity & Access Management

EntraID / Azure AD

AWS IAM

RBAC design

Zero Trust

PAM governance

Access reviews

Documentation

Tools

CDM tools

Job description

Everforth ECS in Arlington, VA is seeking an Identity and Access Management Lead to design and govern enterprise IAM across CDM BETSIE, EntraID, and AWS.

You will implement a formal RBAC framework, enforce least privilege per Zero Trust and federal directives, and manage identity lifecycles for joiners, movers, and leavers. The role collaborates with program leadership, HR, and system owners, and produces IAM metrics for governance reporting.