Identity and Access Management (IAM) Technical SME

DUIT; Oregon; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salaries

Excellent health/dental/vision

401K plans

Job summary

DUIT seeks an Identity and Access Management (IAM) Technical SME with 7+ years of experience to join our enterprise IT team. You will lead governance and RBAC design for a large public university, shaping the joiner/mover/leaver processes and entitlement management across Entra ID, Workday, and third‑party apps.

This role emphasizes hands-on role engineering, risk-tiered access reviews, and collaboration with business units.

Qualifications

• 7+ years in IAM with at least 3 years in IGA.
• Hands-on role engineering and role mining in enterprise environments.
• Experience with Entra ID Governance or SailPoint or Saviynt.
• Working knowledge of SAML, OpenID Connect, SCIM, and Active Directory.
• Strong facilitation and writing skills to explain access decisions to non-technical owners.

Responsibilities

• Assess identity governance maturity and design the access governance, role management, and operating model frameworks.
• Engineer a layered RBAC model (birthright, functional, and application roles) through role mining.
• Define joiner, mover, and leaver lifecycle processes mapped to Entra ID Lifecycle Workflows and entitlement management.
• Design risk-tiered access reviews, access request workflows, and segregation-of-duties rules.
• Assess third-party applications for SSO, SCIM provisioning, and role alignment, and govern service accounts and app registrations.
• Lead requirements workshops with business units and write clear, accessible deliverables.

Skills

IAM expertise

IGA experience

Role engineering

Entra ID Governance

SailPoint

Saviynt

SAML / OIDC

Active Directory

Facilitation & writing

Tools

SailPoint

Saviynt

Microsoft Entra ID Governance

Job description

One of Inc 5000's fastest growing companies with a limitless environment! Davis Unlimited Information Technologies, Inc (DUIT) wants you! We have immediate openings, and are looking a qualified Identity and Access Management (IAM) Technical SME with 7 or more years of experience to join our certified, awarding winning, and innovative IT team!

DUIT, a Maryland-based identity and cybersecurity firm, is building a team to modernize identity governance and role-based access control for a large public university. You will lead the governance and role engineering work: designing the role model, the joiner-mover-leaver lifecycle, access certifications, and segregation-of-duties controls across Workday, Microsoft Entra ID, and third-party applications. Position is contingent on contract award. Anticipated start: February 2027Why work for us?

* No red tape!* Competitive salaries* Great Health/Dental/Vision/Other Insurance Benefits* Excellent 401K plans* 11 Paid Company Holidays & PTO Tiers* Educational Reimbursement Programs

* Limitless environment where you matter* Recognition of outstanding work and other employee incentives* Opportunities for advancement

Davis Unlimited Information Technologies (DUIT) is a Baltimore-based AI and cybersecurity firm working at the cutting edge of post-quantum cryptography, AI development, and federal cybersecurity compliance. Founded in 2010, DUIT supports mission-critical government and critical infrastructure environments — including DoD, and federal civilian agencies. Our leadership team includes a U.S. military veteran with active security clearances, and we proudly support a mission-driven culture that values service, integrity, and national security. We are a federally certified woman-owned and minority-owned small business, giving our team the opportunity to work on high-impact federal contracts and emerging technologies that directly impact national security. "Securing the Future through AI and Quantum-Resilient Innovation."We have opportunities for advancement, and our salaries and benefits are competitive. We are an equal opportunity employer; check us out on the web at You can follow us on LinkedIn, X, and Facebook. We do things differently, contact us to find out how...Together, we can DUIT! Why wait?...Apply today!

All candidates must meet the minimum requirements and information provided is subject to verification.What You Will Get to Do:

* Assess identity governance maturity and design the access governance, role management, and operating model frameworks.

* Engineer a layered RBAC model (birthright, functional, and application roles) through role mining and stakeholder workshops.

* Define joiner, mover, and leaver lifecycle processes and map them to Entra ID Lifecycle Workflows and entitlement management.

* Design risk-tiered access reviews, access request workflows, and segregation-of-duties rules.

* Assess third-party applications for SSO, SCIM provisioning, and role alignment, and govern service accounts and app registrations.

* Lead requirements workshops with business units and write clear, accessible deliverables.

Qualifications You Will Bring:Minimum Required:

* 7+ years in identity and access management, with at least 3 years in identity governance and administration (IGA).

* Hands-on role engineering and role mining experience in an enterprise environment.

* Experience with Microsoft Entra ID Governance (access reviews, entitlement management, Lifecycle Workflows, PIM) or a comparable IGA platform such as SailPoint or Saviynt.

* Working knowledge of SAML, OpenID Connect, SCIM, and Active Directory.

* Strong facilitation and writing skills; able to explain access decisions to non-technical owners.

Preferred:

* Identity work in higher education (multiple affiliations, students, faculty, adjuncts, alumni) and familiarity with FERPA and the eduPerson schema.

* Certifications such as SailPoint IdentityNow Engineer, Microsoft SC-300, CISSP, or CIAM.

* Experience aligning IAM programs to NIST CSF 2.0 or NIST SP 800-53.