Enterprise Directory & Messaging; EDM Lead

Overview

Steer Bridge Strategies is a CVE-Verified Service-Disabled, Veteran-Owned Small Business (SDVOSB) delivering a broad spectrum of professional services to the U.S. Government and private sector. Backed by decades of hands-on experience in federal acquisition and procurement, we provide agile, best-in-class commercial solutions that drive mission success.

Our strength lies in our people—especially the veterans whose leadership, discipline, and dedication shape everything we do. At Steer Bridge, we don’t just hire talent—we empower it, creating meaningful career paths for those who have served and those who share our commitment to excellence.

We are seeking an experienced Enterprise Directory & Messaging (EDM) Lead to design, implement, and oversee enterprise-wide directory services, identity, and access management (IAM) strategies. This role is responsible for establishing secure authentication and authorization frameworks, managing enterprise messaging platforms, and ensuring compliance with regulatory standards.

The ideal candidate will bring hands-on expertise with modern IAM and directory service platforms (cloud, on-prem, and open source) and will be able to design, manage, and enforce access control models across a hybrid enterprise environment. As a senior technical leader, the EDM Lead will collaborate across IT, security, and business teams to modernize IAM capabilities and messaging services while driving adoption of Zero Trust and least privilege principles.

• Directory & Identity Management:
  Oversee Active Directory and Entra  (Azure AD) provisioning, access controls, group policies, and lifecycle management.
• Manage AWS IAM roles, service accounts, and resource-level access controls.
• Administer Google Cloud IAM/Cloud Identity policies, federated access, and service accounts.
• Configure and manage SSO and federation solutions (Okta, Ping, Keycloak, etc.).
• Enforce RBAC/ABAC access policies, least privilege, MFA, and conditional access controls.
• Implement and drive adoption of Zero Trust principles across IAM and directory solutions.
• Messaging & Collaboration Platforms:
  Manage Microsoft Exchange, Office 365, and Teams, ensuring performance, security, and availability.
• Enforce email security standards (SPF, DKIM, DMARC), retention, and encryption policies.
• Lead migration and modernization of messaging and collaboration platforms.
• Cloud & Infrastructure Integration:
  Drive hybrid and cloud-based migrations (Azure, M365/O365, AWS IAM, Google IAM).
• Ensure scalability, high availability, and disaster recovery readiness.
• Automate IAM/directory processes using scripting (Power Shell, Python, etc.).
• Compliance & Governance:
  Align IAM and messaging systems with FedRAMP, NIST, DISA STIGs, ISO 27001, HIPAA, SOX.
• Establish and maintain audit-ready documentation and access governance processes.
• Monitor, report, and remediate IAM-related metrics, risks, and compliance adherence.
• Leadership &
  
  Collaboration:
  
  Supervise technical staff and serve as an escalation point for complex IAM/directory issues. Partner with IT, security, and vendors to deliver secure, enterprise-wide IAM solutions. Provide technical leadership, updates, and recommendations to senior management.

• Required Skills and Qualifications
  :
• 5–7+ years of progressive IT infrastructure, IAM, or security engineering experience, including at least 3 years in a leadership or senior engineering capacity.
• Proven expertise with Microsoft Active Directory and Microsoft Entra  (Azure AD), including user lifecycle management, conditional access, and on-prem integration.
• Experience with cloud IAM platforms:
• AWS IAM (roles, policies, service accounts, resource-level controls).
• Google Cloud IAM / Cloud Identity (policy-based access, service account management, federated identity).
• Familiarity with enterprise SSO/federation platforms such as Okta or Ping Identity, covering MFA, SSO, SaaS app integration, and user provisioning.
• Hands-on experience with open-source/on-prem IAM platforms such as Keycloak (SSO, OAuth2, OIDC, federation, LDAP/AD integration), OpenLDAP or FreeIPA (users, groups, schema extensions, Kerberos integration).
• Experience with…