Lead Specialist, Federal ICAM; Identity, Credential, and Access Management) Engineer

KPMG is currently seeking a Lead Specialist to join our Federal Advisory practice.

Responsibilities:

• Lead the architecture, deployment, and management of Identity, Credentialing, and Access Management (ICAM) solutions using platforms such as Okta, SailPoint, and Cyber Ark
• Develop and enforce access control policies, standards, and procedures in alignment with Zero Trust principles and federal mandates (e.g. NIST, FICAM, HSPD-12)
• Engineer and manage the full lifecycle of digital identifies, including provisioning, de-provisioning, and periodic access reviews
• Integrate ICAM solutions with a wide variety of applications and infrastructure, including cloud (IaaS, PaaS, SaaS) and on-premises environments
• Serve as technical lead for Privileged Access Management (PAM) initiatives, securing and monitoring access for high-risk accounts using tools like Cyber Ark
• Translate federal client unique mission requirements into technical ICAM strategies and roadmaps
• Troubleshoot and resolve complex issues related to identity federation, single sign-on (SSO), multi-factor authentication (MFA), and directory services
• Mentor and review work of junior engineers and act as a key technical advisor to senior leadership

Qualifications:

• A minimum of five years of experience in cybersecurity with a focus on Identify and Access Management; U.S. Federal government consulting experience preferred
• Bachelor's degree from an accredited college/university
• Demonstrated experience with federal ICAM programs and frameworks, such as Federal Identity, Credential, and Access Management (FICAM), HSPD-12, PIV/CAC, and NIST SP 800-53 (Digital Identity Guidelines)
• Hands-on implementation experience with one or more of the following platforms:
  Identify Governance and Administration (IGA), Sailtpoint (Identity IQ or Identity NOW), Access Management, SSO (Okta), PAM (Cyber Ark)
• Preferred certifications: CISSP, GSEC, GCED
• Okta, SailPoint Identity IQ Engineer, and/or Cyber Ark Delivery Engineer certifications strongly preferred
• Experience with identity services in major cloud providers (AWS, Azure, GCP)
• Excellent written and verbal communication skills with the ability to articulate complex technical concepts to both technical and non-technical stakeholders
• Ability to travel as required to support firm engagements
• Applicant must possess a U.S. Government Secret clearance