Identity and Access Management (IAM) Technical SME

DUIT; Arbutus (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salaries

Great Health/Dental/Vision/Other

401K plans

PTO & Holidays

Educational Reimbursement Programs

Recognition of outstanding work

Advancement opportunities

Limitless environment

Job summary

DUIT, a Maryland-based identity and cybersecurity firm, seeks an IAM Technical SME with 7+ years of experience to lead governance and RBAC engineering for enterprise environments. You will map joiner/mover/leaver processes to Entra ID and entitlement workflows, and coordinate with third-party apps for SSO and SCIM provisioning.

You will work across DoD/Federal-aligned contracts, delivering clear deliverables and facilitating cross-functional workshops with stakeholders.

Qualifications

• 7+ years in identity and access management, with at least 3 years in identity governance and administration (IGA).
• Hands-on role engineering and role mining experience in an enterprise environment.
• Experience with Microsoft Entra ID Governance (access reviews, entitlement management, Lifecycle Workflows, PIM) or a comparable IGA platform such as SailPoint or Saviynt.
• Working knowledge of SAML, OpenID Connect, SCIM, and Active Directory.
• Strong facilitation and writing skills; able to explain access decisions to non-technical owners.

Responsibilities

• Assess identity governance maturity and design the access governance, role management, and operating model frameworks.
• Engineer a layered RBAC model (birthright, functional, and application roles) through role mining and stakeholder workshops.
• Define joiner, mover, and leaver lifecycle processes and map them to Entra ID Lifecycle Workflows and entitlement management.
• Design risk-tiered access reviews, access request workflows, and segregation-of-duties rules.
• Assess third-party applications for SSO, SCIM provisioning, and role alignment, and govern service accounts and app registrations.
• Lead requirements workshops with business units and write clear, accessible deliverables.

Skills

Identity & Access Management

IGA

RBAC design

SAML

OpenID Connect

SCIM

Active Directory

Tools

Microsoft Entra ID Governance

SailPoint

Saviynt

Job description

One of Inc 5000's fastest growing companies with a limitless environment! Davis Unlimited Information Technologies, Inc (DUIT) wants you! We have immediate openings, and are looking a qualified Identity and Access Management (IAM) Technical SME with 7 or more years of experience to join our certified, awarding winning, and innovative IT team!

DUIT, a Maryland-based identity and cybersecurity firm, is building a team to modernize identity governance and role-based access control for a large public university. You will lead the governance and role engineering work: designing the role model, the joiner-mover-leaver lifecycle, access certifications, and segregation-of-duties controls across Workday, Microsoft Entra ID, and third-party applications. Position is contingent on contract award. Anticipated start: February 2027

Why work for us?

• No red tape!
• Competitive salaries
• Great Health/Dental/Vision/Other Insurance Benefits
• Excellent 401K plans
• 11 Paid Company Holidays & PTO Tiers
• Educational Reimbursement Programs
• Limitless environment where you matter
• Recognition of outstanding work and other employee incentives
• Opportunities for advancement

Davis Unlimited Information Technologies (DUIT) is a Baltimore-based AI and cybersecurity firm working at the cutting edge of post-quantumcryptography, AI development, and federal cybersecurity compliance. Founded in 2010, DUIT supports mission-critical government and critical infrastructure environments — including DoD, and federal civilian agencies. Our leadership team includes a U.S. military veteran with active security clearances, and we proudly support a mission-driven culture that values service, integrity, and national security. We are a federally certified woman-owned and minority-owned small business, giving our team the opportunity to work on high-impact federal contracts and emerging technologies that directly impact national security.\"Securing the Future through AI and Quantum-Resilient Innovation.\"

We have opportunities for advancement, and our salaries and benefits are competitive. We are an equal opportunity employer; check us out on the web at https://www.duit.us. You can follow us on LinkedIn, X, and Facebook. We do things differently, contact us to find out how...Together, we can DUIT!

All candidates must meet the minimum requirements and information provided is subject to verification.

What You Will Get to Do:

• Assess identity governance maturity and design the access governance, role management, and operating model frameworks.
• Engineer a layered RBAC model (birthright, functional, and application roles) through role mining and stakeholder workshops.
• Define joiner, mover, and leaver lifecycle processes and map them to Entra ID Lifecycle Workflows and entitlement management.
• Design risk-tiered access reviews, access request workflows, and segregation-of-duties rules.
• Assess third-party applications for SSO, SCIM provisioning, and role alignment, and govern service accounts and app registrations.
• Lead requirements workshops with business units and write clear, accessible deliverables.

Qualifications You Will Bring:

Minimum Required:

• 7+ years in identity and access management, with at least 3 years in identity governance and administration (IGA).
• Hands-on role engineering and role mining experience in an enterprise environment.
• Experience with Microsoft Entra ID Governance (access reviews, entitlement management, Lifecycle Workflows, PIM) or a comparable IGA platform such as SailPoint or Saviynt.
• Working knowledge of SAML, OpenID Connect, SCIM, and Active Directory.
• Strong facilitation and writing skills; able to explain access decisions to non-technical owners.

Preferred:

• Identity work in higher education (multiple affiliations, students, faculty, adjuncts, alumni) and familiarity with FERPA and the eduPerson schema.
• Certifications such as SailPoint IdentityNow Engineer, Microsoft SC-300, CISSP, or CIAM.
• Experience aligning IAM programs to NIST CSF 2.0 or NIST SP 800-53.