ICAM Policy Analyst

Wood River Federal; San Antonio (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Wood River Federal is seeking an ICAM Policy Analyst to evaluate, develop, and align enterprise ICAM policy frameworks, governance structures, and security standards across federal, defense, and enterprise environments.

You will bridge technical identity architecture with regulatory compliance, craft SOPs, lead inter-agency policy groups, and prepare executive briefings, risk assessments, and compliance artifacts.

Qualifications

• Bachelor’s degree in cybersecurity, IT, CS, public policy, MIS, or related field.
• 2+ years of policy development, governance, or cybersecurity compliance experience in government or defense.
• Active U.S. Government Secret clearance.
• Excellent written communication, policy-drafting, and executive presentation skills.

Responsibilities

• Draft, update, and operationalize enterprise ICAM governance documents, roadmaps, SOPs.
• Align agency identity policies with federal mandates (OMB M-22-09, M-19-17, NIST SP 800-63/800-53, DoD ICAM).
• Provide policy oversight for PKI, PIV/CAC, SSO, SAML, OIDC, PAM, and IGA.
• Evaluate ABAC/RBAC policy definitions to support Zero Trust and micro-segmentation.
• Perform gap analyses, policy reviews, and risk assessments against standards.
• Lead policy working groups and inter-agency ICAM forums; coordinate with architects and program managers.
• Prepare compliance artifacts and executive briefs for leadership and audits.

Skills

Written communication

Policy drafting

Executive presentation

Analytical thinking

Consensus-building

Education

Bachelor’s Degree

Tools

PKI

MFA

SAML

OIDC/OAuth 2.0

PAM

IGA

Active Directory/Entra ID

LDAP

Job description

Position Overview

The Identity, Credential, and Access Management (ICAM) Policy Analyst is responsible for evaluating, developing, and aligning enterprise ICAM policy frameworks, governance structures, and security standards. This role bridges technical identity architecture and regulatory compliance across complex federal, defense, or enterprise environments. The ICAM Policy Analyst ensures that identity lifecycle management, digital identity standards, access control models, and Zero Trust Architecture mandates are fully compliant with federal directives, defense standards, and NIST guidelines.

Key Responsibilities

• Draft, review, update, and operationalize enterprise-level ICAM governance documents, strategic roadmaps, policy directives, and Standard Operating Procedures (SOPs).
• Align agency identity policies with federal mandates, including OMB M-22-09, OMB M-19-17, Executive Order 14028, HSPD-12, NIST SP 800-63 (Digital Identity Guidelines), NIST SP 800-53, and DoD ICAM strategies.
• Provide policy oversight and compliance guidance for technical capabilities including PKI, PIV/CAC integration, Single Sign-On (SSO), Federated Identity (SAML, OIDC/OAuth 2.0), Privileged Access Management (PAM), and Identity Governance and Administration (IGA).
• Evaluate access control policies (Attribute-Based Access Control / ABAC and Role-Based Access Control / RBAC) to ensure policy definitions directly support Zero Trust Architecture (ZTA) pillars and micro-segmentation strategies.
• Perform gap analyses, policy reviews, and risk assessments on legacy and emerging systems to identify compliance shortfalls relative to federal identity standards and security baselines.
• Lead policy working groups, inter-agency ICAM forums, and consensus-building sessions with enterprise architects, cybersecurity officers, system owners, and program managers.
• Prepare compliance artifacts, policy briefs, decision memos, and executive presentations for agency leadership, inspectors general, or external audit bodies.

Required Qualifications

• Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, Public Policy, Management Information Systems (MIS), or a related field.
• Minimum of two (2) years of professional experience directly supporting identity management policy development, governance, or cybersecurity compliance in government or defense environments.
• Must possess an active U.S. Government Security Clearance (Secret clearance required).
• Exceptional written communication and policy-drafting skills. Strong consensus-building, analytical, and executive presentation capabilities.

Technical & Policy Framework Expertise

• Deep familiarity with federal ICAM directives and frameworks: OMB M-22-09, OMB M-19-17, NIST SP 800-63 (all sub-volumes), NIST SP 800-53, FIPS 201, and HSPD-12.
• Applied understanding of core identity components: PKI, MFA, Federation, SAML, OIDC, IGA, PAM, and Directory Services (Active Directory/Entra ID, LDAP).
• Hands-on experience translating high-level regulatory mandates into actionable policy statements, security baselines, and operational governance frameworks.
• Direct experience supporting Federal ICAM (FICAM) or DoD ICAM architecture and policy implementations.
• Understanding of cloud identity management policies (AWS IAM, Azure Entra ID, Google Cloud IAM) and hybrid identity topologies.
• Familiarity with dynamic access control frameworks (ABAC, Policy Decision Points / Policy Enforcement Points).
• Experience working within the Risk Management Framework process (e.g., EMASS, accreditation packages, PO&Ms, etc.)