Identity and Access Management​/ABAC Architect

Identity and Access Management/ABAC Architect

Suitland, MD

Requires US Citizenship Yes

Employment Term and Type: Regular, Full Time

Required Security Clearance: (Minimum for hire) Secret with ability to obtain TS/SCI

Required

Education:

(Minimum for hire) Bachelor's Degree in Engineering or engineering discipline;
Computer science or IT discipline;
Technical discipline

Salary Band: $170,000- $180,000

Job Description: FGS is seeking an experienced Identity and Access Management (IAM) / Attribute-Based Access Control (ABAC) Architect to lead the design, implementation, and modernization of enterprise identity and access management capabilities supporting Department of Defense and Intelligence Community customers.

The successful candidate will serve as the technical authority for Identity, Credential, and Access Management (ICAM) architecture, enabling secure access to enterprise applications, cloud environments, mission systems, and cross-domain services while supporting Zero Trust Architecture initiatives.

This position is responsible for designing scalable authentication, authorization, federation, privileged access management, and attribute-based authorization solutions that meet Federal cybersecurity requirements while improving operational efficiency and user experience.

The architect will work closely with enterprise architects, cybersecurity engineers, cloud architects, system administrators, application developers, and government stakeholders to ensure identity services are securely integrated across hybrid cloud and on‑premises environments.

• Design and maintain enterprise Identity, Credential, and Access Management (ICAM) architectures supporting DoD and Intelligence Community missions.
• Develop and implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) solutions aligned with Zero Trust principles.
• Architect secure authentication, authorization, federation, and Single Sign-On (SSO) capabilities using technologies such as SAML, OAuth 2.0, OpenID Connect, PKI, CAC/PIV, and Multi-Factor Authentication (MFA).
• Design hybrid identity solutions integrating on‑premises infrastructure with cloud platforms including Microsoft Entra  (Azure AD), AWS, and other enterprise identity providers.
• Develop identity governance, privileged access management (PAM), account lifecycle management, and automated provisioning/deprovisioning processes.
• Collaborate with cloud architects, cybersecurity engineers, network architects, and application teams to integrate secure identity services across enterprise systems.
• Ensure IAM solutions comply with DoD Zero Trust Strategy, RMF, NIST SP 800-53, NIST SP 800-63, CNSSI 1253, and applicable federal cybersecurity requirements.
• Support Authority to Operate (ATO) activities by developing architecture documentation, security designs, implementation guidance, and technical recommendations.
• Conduct identity security assessments, evaluate emerging technologies, recommend improvements, and mentor junior technical staff on IAM and Zero Trust best practices.

• U.S. Citizenship.
• Active Secret clearance and ability to qualify for and obtain a TS/SCI.
• Bachelor’s degree in computer science, Cybersecurity, Information Systems, Engineering, or a related field (or equivalent combination of education and experience).
• Minimum of eight (5) years of experience designing, implementing, and supporting enterprise Identity and Access Management (IAM) solutions, including Identity Governance, Federation, Privileged Access Management (PAM), RBAC, and ABAC.
• Experience implementing enterprise authentication technologies, including Active Directory, Microsoft Entra  (Azure AD), LDAP, PKI, CAC/PIV, SAML, OAuth 2.0, and OpenID Connect.
• Working knowledge of Zero Trust Architecture, Identity, Credential, and Access Management (ICAM), and cloud identity services within hybrid or cloud environments.
• Experience supporting DoD or Intelligence Community customers and familiarity with RMF, NIST SP 800-53, NIST SP 800-63, and other federal cybersecurity standards.
• Strong analytical, problem‑solving, and communication skills with the ability to…