Identity Access Management SME
Washington, DC
Experience: 8
Education: BS
Category: Information Technology
Contractor Work Model: Onsite
Brand: System One
Job ID: 378879
Date Posted: 08/24/2026
Shortcut: http://jobs.systemone.com/oMNvup
Job Title: Identity Access Management SME
Location: Washington, DC
Type: Contract
Compensation: $63.75/hr
Work Model: Onsite – onsite
Hours: 40.0
Security Clearance: Ability to obtain and maintain a Public Trust Clearance (or higher if required)
Overview
This is a senior-level cybersecurity and identity management role focused on leading enterprise Identity and Access Management (IAM) strategy, governance, and operations. The position serves as the technical authority for Microsoft Entra ID (Azure AD), Microsoft ICAM, Zero Trust security, and identity governance, ensuring secure access across cloud and on-premises environments.
Responsibilities
- Serve as the senior technical authority for enterprise IAM capabilities supporting the contract.
- Lead the design, implementation, and governance of Microsoft Entra- and Microsoft ICAM-based frameworks and identity services to ensure secure authentication, authorization, compliance, and least-privilege access across cloud and on-premises environments.
- Drive the implementation of conditional access, MFA, PIM/PAM, RBAC, and identity governance workflows aligned with SEC zero-trust objectives and OMB M-22-09 direction.
- Partner with infrastructure, security, and operations teams to sustain audit readiness, support FISMA evidence requirements, and resolve complex identity and access challenges at enterprise scale.
- Design and implement secure authentication and authorization models using Microsoft Entra ID, Microsoft ICAM, and role-based access controls.
- Lead the integration of Entra identity services with Microsoft 365 and enterprise applications for consistent identity lifecycle and policy enforcement.
- Define IAM standards, patterns, and operating procedures aligned with zero-trust principles and federal security requirements.
- Manage joiner/mover/leaver identity lifecycle processes, directory services, and account governance to maintain accurate access provisioning.
- Implement and maintain conditional access policies, MFA, privileged identity/access management, and identity protection controls.
- Establish and operate access reviews, entitlement management, and governance workflows to enforce least privilege and reduce insider-risk exposure.
- Oversee RBAC design, assignment, and recertification, including automated processes for policy consistency.
- Ensure IAM services support continuing Authorization to Operate objectives with complete SOP and control documentation.
- Align IAM controls with NIST, ISO 27001, CISA SCuBA, FISMA, and SEC/OIT security policy requirements.
- Produce artifacts and evidence for audits, assessments, FISMA, and internal/external reviews.
- Support remediation planning and corrective actions for IAM findings, risks, and deficiencies.
- Lead resolution of complex identity and access incidents, root causes, and recurring gaps.
- Drive automation of identity provisioning, deprovisioning, policy enforcement, and reporting.
- Collaborate with security, cloud, endpoint, and service management teams to implement identity-dependent controls.
- Provide strategic guidance to stakeholders on IAM roadmap priorities, modernization, and operational risk.
Requirements
- Must meet contract requirements for citizenship/work authorization.
- Ability to obtain and maintain Public Trust clearance (or higher if required).
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field.
- Minimum 8 years of experience in identity governance, IAM, or cybersecurity roles supporting enterprise environments.
- Hands-on experience implementing and operating Microsoft Entra ID (Azure AD) and Microsoft ICAM capabilities.
- Advanced experience with MFA, conditional access, privileged access management, and identity governance.
- Strong understanding of compliance frameworks (NIST, ISO 27001, CISA SCuBA) and zero-trust principles.
- Experience supporting federal or highly regulated enterprise IAM modernization initiatives (preferred).
- Knowledge of scripting/automation tools for IAM operations (preferred).
- Certifications such as Microsoft SC-300, CISSP, or CISM are a plus.
System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#M-M2
#LI-HJA
Ref: #851-Rockville-S1
-
Cybersecurity Engineer ( W2 direct hire, no C2C )
Alpharetta, Georgia
*** This is a direct hire role ( W2 salaried, permanent, full-time position ) in our own IT department *** NO C2C candidates, NO 3rd parties, NO visa sponsorship available, NO green card sponsorship available, NO candidates with temporary work authoriz...
Date Posted: 08/19/2026 Recommended
-
Cybersecurity Engineer ( W2 direct hire, no C2C )
Atlanta, Georgia
*** This is a direct hire role ( W2 salaried, permanent, full-time position ) in our own IT department *** NO C2C candidates, NO 3rd parties, NO visa sponsorship available, NO green card sponsorship available, NO candidates with temporary work authoriz...
Date Posted: 08/19/2026 Recommended
-
Cybersecurity Engineer ( W2 direct hire, no C2C )
Pittsburgh, Pennsylvania
*** This is a direct hire role *** NO C2C candidates, NO 3rd parties For immediate consideration, please connect with me on LinkedIn at https://www.linkedin.com/in/dpotapenko and then email your resume, current location, availability, and compensation ...
Date Posted: 08/18/2026 Recommended
-
Modern Workplace Engineer
Merrifield, VA
Job Title: IT Engineer Location: Merrifield, VA Type: Contract Compensation: Work Model: Hybrid – onsite and remote Hours: 40.0 Security Clearance: Responsibilities • Support the organization's transition from traditional Citrix VDI to Microsoft Window...
Date Posted: 08/10/2026 Recommended
-
Senior Azure Cloud & GitHub Platform Engineer
Merrifield, VA
Title: Senior Azure Cloud & GitHub Platform Engineer Location: Vienna, VA Work Schedule: hybrid, onsite 3 days a week Pay Rate: Open to both W2 and established 1099's Position Type: Multiyear Contract This group is looking for a Senior Azure Cloud & Gi...
Date Posted: 08/17/2026 Recommended
-
Enterprise Endpoint Engineer (Intune Experience)
Indianapolis, IN
Job Title: Enterprise Endpoint Engineer (Intune Experience) Location: Indianapolis, IN Type: Contract Compensation: $52.85 - $60.00 Work Model: Onsite Hours: 40.0 Security Clearance: Ability to obtain public trust clearance Overview This is a hands-on ...
Date Posted: 07/30/2026 Recommended
-
Cloud Engineer
20171, Virginia
Job Title: Cloud Engineer Location: Herndon, Virginia Type: Direct Hire Compensation: $200,000.00 - $250,000.00 Work Model: Remote – offsite Hours: 40.0 hours per week Security Clearance: Active Secret Clearance Required Responsibilities Manage, config...
Date Posted: 07/15/2026 Recommended
-
Microsegmentation Engineer
Vienna, VA
Job Title: Network Security Microsegmentation Engineer Location: REMOTE Pay Rate: Open to W2 Position Type: Multiyear Contract Candidates must live in the United States and be able to work on our payroll as a W2 hourly contractor. Will consider establi...
Date Posted: 07/14/2026 Recommended
-
Senior Cloud Administrator (Okta)
Washington, DC
Senior Cloud Administrator (Okta) Washington, DC – 100% ONSITE Per Federal contract U.S. Citizenship Required Must be able to pass enhanced background screen (criminal, financial, drug) for Public Trust clearance W-2 or C2C Application Deadline: 7/30/2...
Date Posted: 07/16/2026 Recommended
-
Senior Enterprise Mobility Engineer
Washington, DC
Senior Enterprise Mobility Engineer Washington, DC – 100% Onsite 1709 New York Ave Per Federal contract U.S. citizenship is required Must be able to obtain PASS federal background check for Public Trust clearance Long Term W2 or C2C Contract Must Apply...
Date Posted: 08/14/2026 Recommended
-
AWS Cloud Platform Architect
McLean, VA
AWS Cloud Platform Architect 100% remote Must be able to obtain Public Trust Clearance W2 employment only NO C2C Responsibilities: • Design, implement, and manage scalable, secure, and resilient AWS cloud architectures for enterprise applications, data...
Date Posted: 06/23/2026 Recommended
-
Senior IAM Engineer
Midvale , Utah
Job Title: Senior IAM Engineer (Java & Cloud Native) Location: Salt Lake City, Utah Work Mode : 5 Days Onsite Duration : Contract to Hire About the Opportunity System One is seeking a highly skilled Senior IAM Engineer to design, develop, and support m...
Date Posted: 06/04/2026 Recommended
-
Governance Risk & Compliance Analyst
Lakewood, CO
Job Title: Governance Risk & Compliance Analyst Location: Lakewood, CO Work Model: Hybrid – onsite and remote Overview System One is seeking a GRC Analyst for an opportunity in Lakewood, CO. The GRC Analyst is a member of the Governance, Risk & Complia...
Date Posted: 06/17/2026 Recommended
-
Data Architect- Wealth Management
Naperville, Illinois
Job Title: Data Architect- Wealth Management Location: Naperville, IL Type: Direct Hire Compensation: Open Work Model: Onsite Hours: 40.0 Security Clearance: N/A Responsibilities Design and maintain the end to end data architecture for the Wealth Manag...
Date Posted: 07/15/2026 Recommended
-
IT Assurance Manager
The Woodlands, TX
Title: IT Assurance Manager Location: The Woodlands (onsite daily) Direct Hire Summary We are seeking an experienced, hands-on Manager to lead IT Audit, IT SOX, and IT Risk initiatives for a rapidly growing, publicly traded construction client in The W...
Date Posted: 08/20/2026 Recommended
-
Cloud Engineer (onsite)
Washington, DC
Cloud Engineer Washington, DC – 100% Onsite Per Federal contract U.S. Citizenship or Green Card is Required Must be able to pass enhanced background screen (criminal, financial, drug) for Public Trust clearance W-2 or C2C Application Deadline: 8/28/202...
Date Posted: 08/11/2026 Recommended
-
Endpoint Systems Engineer
Melbourne, FL
Job Title: Endpoint Systems Engineer Location: Melbourne, FL Type: Contract To Hire Compensation: $110,000.00 - $120,000.00 Work Model: Hybrid – onsite and remote Overview As an Endpoint Systems Engineer, you will be responsible for designing, implemen...
Date Posted: 07/27/2026 Recommended
-
Endpoint Systems Engineer
Miramar, FL
Job Title: Endpoint Systems Engineer Location: Miramar, FL Type: Contract To Hire Compensation: $110,000.00 - $120,000.00 Work Model: Hybrid – onsite and remote Overview As an Endpoint Systems Engineer, you will be responsible for designing, implementi...
Date Posted: 07/27/2026 Recommended
-
Junior Security Control Assessor
Bethesda, Maryland
Location: Bethesda, MD (mostly remote, occasional onsite required) Work schedule: 40 hrs/week Compensation: $100,000–$115,000/year Target start: by end of August 2026 Clearance / Public Trust: Public Trust eligibility (Tier 2/3) required About the role...
Date Posted: 07/24/2026 Recommended
-
Cloud Network Engineer
Greenbelt, Maryland
Job Title: Cloud Network Engineer Location: REMOTE Clearance: Must be eligible to obtain a US Public Trust Contact: Crystal.dinnocenti@systemone.com System One is seeking to hire a Cloud Network Engineer to support a major, large-scale, multi-cloud ent...
Date Posted: 07/07/2026 Recommended
-
Senior Enterprise Data Privacy Analyst
Merrifield, VA
Job Title: Senior Enterprise Privacy Governance and Risk Management Analyst Location: Vienna, VA Work Schedule: Hybrid, onsite 3 days a week Pay Rate: Open to W2 and established 1099's (no c2c) Position Type: Multiyear Contract We are currently seeking...
Date Posted: 08/12/2026 Recommended
-
Technical Lead / Solution Architect
Virginia, VA
Job Title: Technical Lead / Solution Architect Location: Open to Hybrid in Vienna, VA, Winchester, VA or Pensacola, FL or can be REMOTE Type: Long Term Contract Overview We are seeking an experienced Technical Lead / Solution Architect to lead the arch...
Date Posted: 07/21/2026 Recommended
-
Principal Government & Defense Technology Architect
NA, VA
Principal Government & Defense Technology Architect Client: DHL Location: Remote, United States Work Authorization: Candidates must be authorized to work in the United States without current or future sponsorship Position Summary System One IT is seeki...
Date Posted: 08/14/2026 Recommended
-
Senior Platform Engineer
Washington, DC
Senior Platform Engineer Washington, DC – onsite US citizenship required per government contact Must be able to obtain Public Trust clearance Type: Multi-Year Contract supporting Federal Reserve Board Open to W2 and C2C Deadline to apply: June 29th Joi...
Date Posted: 06/15/2026 Recommended
-
Platform Engineer (VMware & AWS)
Washington, DC
Platform Engineer (VMware & AWS) Washington, DC – 100% Onsite Per Federal contract U.S. citizenship is required Must be able to obtain PASS federal background check for Public Trust clearance W2 with Benefits or C2C Contract Application Closing date Se...
Date Posted: 08/21/2026 Recommended
-
GenAI Ops Solution Architect
Pittsburgh , Pennsylvania
GenAI Ops Solution Architect Permanent Full Time 5 days Strongsville, OH, Dallas, TX, or Pittsburgh, PA. Visa : USC, GC, EAD (Only W2, No Sponsorship) Position Description GenAI Ops Solution Architect who will lead the design, governance, and evolution...
Date Posted: 07/10/2026 Recommended
-
Active Directory Engineer
Springfield, VA
Job Title: Active Directory Engineer Location: Springfield, VA Onsite – onsite Security Clearance: Top Secret Responsibilities Support the process to allow on-premise web-based applications to be accessed externally in a secure manner Configure Conditi...
Date Posted: 06/16/2026 Recommended
-
Lead DevSecOps Engineer
Pittsburgh, Pennsylvania
Job Title: Lead DevSecOps Engineer Location: Pittsburgh, PA Responsibilities Lead the integration of security into CI/CD pipelines, architect secure cloud environments, and guide teams in adopting modern DevSecOps practices to ensure a secure-by-design...
Date Posted: 06/29/2026 Recommended
-
Lead DevSecOps Engineer
Dallas , Texas
Job Title: Lead DevSecOps Engineer Location: Dallas, Texas Responsibilities Lead the integration of security into CI/CD pipelines, architect secure cloud environments, and guide teams in adopting modern DevSecOps practices to ensure a secure-by-design ...
Date Posted: 06/29/2026 Recommended
-
Lead DevSecOps Engineer
Strongsville, Ohio
Job Title: Lead DevSecOps Engineer Location: Strongsville, OH Type: Fulltime Responsibilities Lead the integration of security into CI/CD pipelines, architect secure cloud environments, and guide teams in adopting modern DevSecOps practices to ensure a...
Date Posted: 06/29/2026 Recommended