Lead Specialist, Federal ICAM (Identity, Credential, and Access Management) Engineer

KPMG LLP; McLean (VA); On-site; USD 140,000 - 180,000; Full time

Job summary

KPMG LLP is seeking a Lead Specialist in McLean, VA to lead ICAM architecture, deployment, and management across federal engagements. You will implement policies, drive Zero Trust aligned with NIST/FICAM/HSPD-12, and manage identity lifecycle including provisioning and reviews.

The role requires hands-on experience with Okta, SailPoint IdentityIQ/IdentityNOW, CyberArk, plus cloud and on-prem integrations. Strong communication and mentoring skills are essential.

Qualifications

• A minimum of five years of cybersecurity experience with a focus on Identify and Access Management in federal contexts.
• Bachelor's degree from an accredited college/university.
• Experience with federal ICAM programs/frameworks (FICAM, HSPD-12, NIST SP 800-53).
• Hands-on with platforms like Okta, SailPoint IdentityIQ/IdentityNOW, and CyberArk.
• Certifications such as CISSP, GCED, or GSEC are preferred.

Responsibilities

• Lead the architecture, deployment, and management of ICAM solutions (Okta, SailPoint, CyberArk).
• Develop and enforce access control policies aligned with Zero Trust and federal mandates.
• Engineer lifecycle management of digital identities including provisioning and reviews.
• Integrate ICAM with cloud and on-prem environments; mentor junior engineers.

Skills

ICAM

IAM leadership

Zero Trust

SSO/MFA

Federal consulting

Cloud integration

Policy development

Education

Bachelor's degree

Tools

Okta

SailPoint

CyberArk

PIV/CAC

Job description

KPMG is currently seeking a Lead Specialist to join our Federal Advisory practice.

Responsibilities:

• Lead the architecture, deployment, and management of Identity, Credentialing, and Access Management (ICAM) solutions using platforms such as Okta, SailPoint, and CyberArk
• Develop and enforce access control policies, standards, and procedures in alignment with Zero Trust principles and federal mandates (e.g. NIST, FICAM, HSPD-12)
• Engineer and manage the full lifecycle of digital identifies, including provisioning, de-provisioning, and periodic access reviews
• Integrate ICAM solutions with a wide variety of applications and infrastructure, including cloud (IaaS, PaaS, SaaS) and on-premises environments
• Serve as technical lead for Privileged Access Management (PAM) initiatives, securing and monitoring access for high-risk accounts using tools like CyberArk
• Translate federal client unique mission requirements into technical ICAM strategies and roadmaps
• Troubleshoot and resolve complex issues related to identity federation, single sign-on (SSO), multi-factor authentication (MFA), and directory services
• Mentor and review work of junior engineers and act as a key technical advisor to senior leadership

Qualifications:

• A minimum of five years of experience in cybersecurity with a focus on Identify and Access Management; U.S. Federal government consulting experience preferred
• Bachelor's degree from an accredited college/university
• Demonstrated experience with federal ICAM programs and frameworks, such as Federal Identity, Credential, and Access Management (FICAM), HSPD-12, PIV/CAC, and NIST SP 800-53 (Digital Identity Guidelines)
• Hands-on implementation experience with one or more of the following platforms: Identify Governance and Administration (IGA), Sailtpoint (IdentityIQ or IdentityNOW), Access Management, SSO (Okta), PAM (CyberArk)
• Preferred certifications: CISSP, GSEC, GCED
• Okta, SailPoint IdentityIQ Engineer, and/or CyberArk Delivery Engineer certifications strongly preferred
• Experience with identity services in major cloud providers (AWS, Azure, GCP)
• Excellent written and verbal communication skills with the ability to articulate complex technical concepts to both technical and non-technical stakeholders
• Ability to travel as required to support firm engagements
• Applicant must possess a U.S. Government Secret clearance