Identity, Credential, and Access Management (ICAM) Analyst

Jobless; Arlington, Northern (TX, KY); Hybrid; USD 170,000 - 250,000; Full time

Job summary

Spry Methods is seeking an ICAM SME with deep federal identity policy expertise to design and evaluate architectures across AD, Azure, and third-party IAM tools. You will work with DoD programs, ensure compliance with NIST and FICAM, and contribute to future-state identity capabilities.

The role involves Agile collaboration with a diverse SME team, governance of MFA and encryption, and engagement with both federal and commercial stakeholders to advance ICAM roadmaps.

Qualifications

• Secret Clearance required and 15+ years in information security and IAM.
• 5+ years in cloud services (Azure, AWS) with cloud tech proficiency.
• Knowledge of FICAM policies, directives and standards (NIST, HSPD-12).
• Experience implementing IAM/ICAM tools in enterprise environments.

Responsibilities

• Provide recommendations on ICAM standards, policies, and implementations.
• Translate complex technical issues to high-level messages for non-technical stakeholders.
• Support future ICAM enhancements including FIDO2 password-less standards.
• Governance support for MFA, Encryption, and ADAC work streams.
• Manage lifecycle and roadmap with internal/external stakeholders.
• Facilitate meetings to drive ICAM future-state capabilities.

Skills

Secret Clearance

15+ years in information security /IAM

Cloud experience (Azure, AWS)

FICAM policies and standards

IAM/ICAM standards

AD / Azure AD / ADFS

MFA / SSO / OAuth2 / OIDC / SAML

FPKI concepts

Azure DevSecOps

Tools

Radiant Logic

SailPoint

Ping Identity

Azure Active Directory

AD FS

Job description

Company Overview

Spry Methods is a proven provider of mission-focused technology, cybersecurity, and program management solutions supporting critical Federal and DoD missions. We specialize in delivering integrated, high-impact solutions across cyber operations, enterprise resource management, and mission support services. Our culture emphasizes collaboration, accountability, and innovation - empowering our teams to deliver meaningful outcomes in complex, high-security environments.

Who We’re Looking For (Position Overview):

Spry is seeking an Identity, Credential, and Access Management (ICAM) subject matter expert (SME) with deep understanding and experience in federal identity policies, guidance, and technical implementations. You should be exceptionally familiar with ICAM enabling technologies (e.g. Microsoft (MS) Active Directory (AD), MS Azure, Radiant Logic, SailPoint, Ping, et al) in order to work with clients on formulating, designing and evaluating architectures and technical solutions. Key activities you will be a part of include contributing to current and future-state DOD identity capabilities and related technology processes. You will help ensure ICAM compliance to federal (e.g. NIST) guidance and standards, and provide expertise in support of government ICAM authorities (i.e. OSD/DISA), to internal and external stakeholders. You will also assist in Agile development efforts and will be part of a diverse team of SMEs supporting an enterprise wide federal ICAM program.

What Your Day-To-Day Looks Like (Position Responsibilities):

• Provide recommendations on ICAM standards, policies, and technical implementations for the benefit of other program members.
• Translate complex technical issues to high-level messages targeted for non-technical stakeholders.
• Provide support for future ICAM enhancements, such as adoption of Fast Identity Online 2 (FIDO) password-less standards.
• Provide overall ICAM governance support for MFA, Encryption, and Automated Dynamic Access Control (ADAC) work streams.
• Recommend lifecycle management for emerging technologies.
• Work with a variety of internal and external ICAM program stakeholders (both federal and commercial) to execute on a strategic ICAM roadmap.
• Facilitate and support meetings with program team members and client stakeholders to drive ICAM future-state capabilities.
• Work cross-functionally across program teams.
• Author and review Knowledge Based (KB) articles to effectively disseminate knowledge to the rest of the ICAM program.
• Perform continual improvement and risk management activities, to include providing mitigation strategies.
• Participate in long term planning and vendor engagement working sessions.
• Demonstrate strong problem-solving mindset with the ability to perform stakeholder analysis for complex programs.
• Work closely with ICAM vendors, ensuring they products align to the ICAM ZTA roadmaps and presidential directives.

What You Need to Succeed (Minimum Requirements):

• Secret Clearance
• Experienced Professional with combined 15+ years within the fields of Information Security and Identity & Access Management with regards to developing, implementing, and overseeing the protection of information, information systems and (IT) requirements.
• 5+ years of experience on working in any major cloud (Azure, AWS or like) services and proficient with Cloud technologies.
• Knowledge of and experience with architecting solutions adhering to Federal Identity, Credential, and Access Management (FICAM) policies, directives, and standards.
• Knowledge of IAM and ICAM policies and standards (e.g., HSPD-12, FIPS 201, NIST- 800-63, and NIST SP 800-53 Rev 5)
• Understanding of ICAM as a foundational element of a Zero Trust architecture.
• Knowledge of implementing IAM tools in an enterprise environment.
• Knowledge of Active Directory (AD), Azure AD, AD Federated Services (ADFS), common ICAM standards (e.g. OAuth 2.0, OIDC, SAML, SCIM, FIDO2, XACML, Attribute and Role based access control (ABAC and RBAC)), multi-factor authentication solutions (AAL2 and AAL3), single sign on, entitlement management.
• Familiar with Azure DevSecOps tools and processes.
• Has hands-on experience managing or supporting complex technical ICAM implementations, and experience with Federal Public Key Infrastructure (FPKI).
• Experience working directly on large scale ICAM implementations, with a strong understanding of the DOD ICAM Strategy, the Federal ICAM (FICAM) Architecture, and service level strategies & Federal Public Key Infrastructure (FPKI) concepts and their relationship to PIV, derived PIV, and Azure AD CBA.
• Strong understanding Azure AD concepts, i.e. enterprise applications, application registrations, managed identities, and service principals; conditional access framework, authentication strengths, and their relationship to NIST (e.g. 800-63B); SCIM and Azure AD User Provisioning; and deploying Identity Experience Framework (IEF) policies.

Ideally, You Also Have (Preferred Qualifications):

• Ability to see the big picture and lead the team with a detailed task level aligned with the big picture.
• Strong oral and written communication skills with the ability to tailor your messaging to technical and non-technical audiences.
• Proficient to handle multi-tasking and ability to prioritize (teams) tasks independently based on organizations priorities.
• Ability to manage various stakeholders (technical and non-technical) and collaborate with others to achieve common goals.
• Experience working using agile methods and scrum process.
• Demonstrated ability to understand complex technical issues at a high-level and communicate them to non-technical stakeholders.
• Excellent diagnostic, critical thinking, and analytical skills.
• Ability to understand CC/S/A challenges and identify and recommend appropriate strategies and technical solutions