Account Manager, Senior

Identity and Access Management Specialist II

Location: Rockville, MD - Onsite ( 5 days Onsite)
Travel: Approximately 10%-15%
Clearance: Ability to obtain and maintain a Public Trust Tier 2 background investigation and HHS PIV credential
Sponsorship: No sponsorship assistance is available for this position.

LCG is seeking an Account Manager to support enterprise identity, access, and account-management operations within the Health Resources and Services Administration’s secure federal IT environment.

This position supports more than 3,100 active enterprise user accounts across Microsoft Active Directory, Microsoft Entra , Okta, and SailPoint Identity Governance. The specialist will ensure that account provisioning, access changes, authentication support, account termination, and compliance reporting are completed accurately, securely, and in accordance with HRSA, HHS, and federal security requirements.

The successful candidate will serve as a dedicated resource for daily account-management operations and work closely with federal IAM administrators, DEUS leadership, system owners, and the Contracting Officer’s Representative. The role will also help improve account-management processes through Power Shell scripting, Service Now automation, Entra , Okta Workflows, and other identity automation capabilities.

• Administer and maintain user accounts across Microsoft Active Directory, Microsoft Entra , and Okta.
• Process employee and contractor account requests in accordance with approved onboarding documentation, Service Now tickets, and established standard operating procedures.
• Create, modify, disable, and terminate user accounts throughout the full identity lifecycle.
• Grant access to approved systems, applications, shared mailboxes, distribution lists, security groups, and enterprise resources.
• Update account attributes, group memberships, license assignments, roles, and access permissions based on approved requests.
• Verify that all account-management actions are properly authorized before provisioning, modifying, or removing access.
• Troubleshoot account lockouts, password issues, multifactor authentication failures, synchronization problems, attribute errors, and smart card or PIV authentication issues.
• Support hybrid identity environments involving Active Directory, Entra , Microsoft 365, and Okta.
• Escalate terminated, suspended, disabled, or otherwise restricted account issues to the appropriate federal IAM administrator.
• Ensure no account-management action is performed outside approved procedures or authorization channels.

• Support SailPoint Identity Governance as a managed enterprise service.
• Troubleshoot user-access issues and interpret identity provisioning, certification, and access-review results.
• Coordinate with federal and NIH identity administrators when issues require escalation.
• Assist with the development and implementation of role-based access control models.
• Support birthright provisioning approaches that standardize baseline permissions and improve onboarding efficiency.
• Help identify excessive, outdated, conflicting, or inappropriate user access.
• Support remediation activities directed by system owners or federal IAM administrators.

• Develop, test, document, and maintain Power Shell scripts for account creation, modification, deprovisioning, group administration, and compliance reporting.
• Automate onboarding, offboarding, account modification, and access-management workflows.
• Support automation using Power Shell, Microsoft Entra , Okta Workflows, and Service Now workflows.
• Develop automated reports covering provisioning status, deprovisioning activity, access changes, inactive accounts, and compliance exceptions.
• Identify manual account-management processes that can be improved through automation.
• Ensure scripts and automated workflows include appropriate controls, validation, documentation, and error handling.

• Conduct quarterly account reviews for assigned systems.
• Compile current users, assigned roles, access permissions, and last-access information.
• Identify inactive, orphaned, duplicate, or potentially inappropriate accounts based on HRSA requirements.
• Provide review findings and recommended corrective actions to system owners.
• Implement approved account modifications or removals.
• Improve the accuracy and efficiency of recertification activities through automation.
• Prepare the Quarterly Account Recertification Report, including findings, inactive accounts, exceptions, and completed corrective actions.

• Develop and maintain policies, procedures, standard operating procedures, work instructions, and technical documentation for account-management activities.
• Review and update account-management documentation at least twice annually.
• Collaborate with federal subject-matter experts to identify workflow…