ICAM Controls SME

Location:

Washington, DC

Employment Type:

Full-Time

Clearance:
Ability to obtain and maintain a Government position of trust/Public Trust determination, Common Access Card (CAC), and NIPRNet access

Salary Range: $135,000–$165,000 annually

Digital Global Connectors (DGC) is seeking an experienced Identity, Credential, and Access Management (ICAM) Controls Subject Matter Expert (SME) to support the Department of the Air Force (DAF) ICAM Program Management Office (PMO) in a System and Organization Controls (SOC) 1 audit-readiness capacity.

The ICAM Controls SME will support the evaluation, documentation, testing, and continuous improvement of enterprise identity governance and access management controls. This individual will focus on identity lifecycle management, role and attribute mapping, Segregation of Duties (SoD), privileged access governance, and technical control evidence supporting the DAF's financial audit-readiness objectives.

The specialist will work closely with Government stakeholders, identity governance teams, Privileged Access Management (PAM) organizations, operations and sustainment (O&S) personnel, and external service providers to evaluate control effectiveness and develop defensible, traceable audit evidence.

The ideal candidate possesses hands-on experience with Okta Identity Provider (IdP) and SailPoint Identity IQ, strong knowledge of federal identity governance requirements, and demonstrated ability to translate complex technical configurations into clear control narratives and audit evidence suitable for Independent Public Accountant (IPA) review.

• Evaluate and document enterprise identity lifecycle management processes, including joiner, mover, and leaver workflows.
• Decompose identity lifecycle processes into auditable control points, identifying the system of record, initiating triggers, workflows, approval authorities, and completion evidence.
• Assess the effectiveness of automated and manual identity provisioning, modification, and deprovisioning controls.
• Test the timeliness, completeness, and accuracy of account provisioning and deprovisioning activities.
• Evaluate periodic user access recertification processes and associated approval and completion evidence.
• Assess orphaned-account detection, identification, and remediation processes.
• Identify control weaknesses, manual dependencies, and opportunities to improve identity lifecycle governance and audit readiness.

• Evaluate enterprise Identity Governance and Administration (IGA) capabilities supporting DAF ICAM requirements.
• Map business processes, user populations, roles, identity attributes, access policies, and entitlements to applicable access governance controls.
• Assess Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) configurations and associated control effectiveness.
• Review identity governance workflows and access authorization processes to ensure alignment with established business and security requirements.
• Evaluate the completeness and accuracy of access entitlements and role assignments.
• Identify inappropriate, excessive, or outdated access privileges and recommend corrective actions.
• Support improvements to identity governance documentation, control traceability, and access review procedures.

• Document, evaluate, and test Segregation of Duties (SoD) rules and associated access restrictions.
• Assess preventive and detective SoD controls designed to identify and mitigate conflicting access privileges.
• Evaluate SoD exception approval processes, compensating controls, and…