Identity and Access Management (IAM) Subject Matter Expert (SME)

Peraton is seeking an experienced Identity and Access Management (IAM) Subject Matter Expert (SME) to serve as the senior technical authority supporting the U.S. Department of Health and Human Services Office of Inspector General (HHS-OIG).

The IAM SME will provide strategic leadership, enterprise architecture guidance, and technical oversight for Identity, Credential, and Access Management (ICAM) technologies supporting a hybrid cloud enterprise. This role will lead the design, governance, implementation, and continuous improvement of enterprise identity services while ensuring alignment with Zero Trust Architecture, federal cybersecurity mandates, and HHS security policies.

The successful candidate will serve as a principal advisor to Government leadership, cybersecurity personnel, infrastructure teams, application owners, and engineering teams on IAM initiatives. The role will establish technical standards, review solution architectures, mentor engineering staff, and guide modernization of enterprise identity services.

Position Responsibilities:

• Serve as the senior technical authority for Identity and Access Management (IAM) and Identity Governance and Administration (IGA) initiatives.
• Provide strategic guidance for modernization of enterprise identity services supporting cloud transformation and Zero Trust initiatives.
• Lead architecture, design, implementation, and governance of enterprise IAM solutions ensuring scalability, security, and operational efficiency.
• Provide technical oversight for Microsoft Entra ID, Active Directory, Hybrid Identity, Multi-Factor Authentication (MFA), Conditional Access, Identity Governance, and Privileged Access Management (PAM).
• Lead enterprise application onboarding and integration into IAM platforms.
• Develop enterprise IAM standards, architecture patterns, governance models, technical roadmaps, and implementation strategies.
• Review and approve IAM solution designs, engineering documentation, and implementation plans.
• Guide implementation of automated identity lifecycle management, provisioning, deprovisioning, access certification, and role-based access control (RBAC).
• Provide expertise in authentication and federation technologies including SAML, OAuth, OpenID Connect, SCIM, LDAP, and federation services.
• Support security assessments, Authority to Operate (ATO) packages, and compliance initiatives.
• Advise Government leadership on IAM technologies, cybersecurity best practices, and risk mitigation strategies.
• Provide technical leadership during identity-related security incidents, authentication failures, and privileged account events.
• Collaborate with Cybersecurity, Cloud Engineering, Infrastructure, Networking, Endpoint Engineering, and Application Development teams.
• Mentor engineering staff and provide technical leadership across multiple IAM initiatives.
• Develop and maintain enterprise architecture documentation, standards, runbooks, and Standard Operating Procedures (SOPs).
• Participate in executive briefings, technical strategy sessions, engineering reviews, and customer meetings.

Required Qualifications:

• Bachelor’s degree and 8 years of experience or 12 years with a HS diploma/equivalent.
• Experience designing, implementing, and supporting enterprise IAM solutions.
• Experience in IAM architecture, technical leadership, or SME roles.
• Demonstrated experience designing and implementing Identity Governance and Administration (IGA) solutions.
• Extensive experience with Microsoft Entra ID (Azure AD), Active Directory, and Hybrid Identity.
• Experience implementing and supporting Privileged Access Management (PAM) solutions, preferably CyberArk.
• Experience implementing MFA, Conditional Access, and Zero Trust identity controls.
• Strong understanding of identity lifecycle management, provisioning, RBAC, and access governance.
• Experience supporting Azure and Microsoft 365 identity services.
• Experience supporting federal cybersecurity requirements including NIST 800-53, NIST 800-63, NIST 800-207 Zero Trust Architecture, and FISMA.
• Experience developing architecture documentation, SOPs, technical standards, and implementation plans.
• Strong communication skills with the ability to present technical concepts to executive leadership.
• Must be a US Citizen
• Ability to obtain and maintain the agency clearance

Preferred Qualifications:

• Experience supporting HHS, DHS, DOJ, or other Federal Civilian agencies.
• Experience implementing Microsoft Entra Identity Governance.
• Experience with SailPoint IdentityIQ/IdentityNow or Saviynt Enterprise Identity Cloud.
• Experience with Okta Workforce Identity or Ping Identity.
• Experience with Microsoft Defender XDR and Microsoft Security solutions.
• Experience supporting Azure cloud architecture and hybrid cloud environments.
• Experience supporting DevSecOps environments and API-based identity integrations.
• Experience developing enterprise IAM roadmaps and modernization strategies.

Preferred Certifications- One or more:

• CISSP
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Azure Solutions Architect Expert
• CyberArk Defender or CyberArk Sentry
• Certified Identity and Access Manager (CIAM)
• ITIL Foundation v4