IAM Technical SME

DUIT•Halethorpe, MD

6d•$135,000 - $165,000

About The Position

Davis Unlimited Information Technologies, Inc. (DUIT) is seeking an Identity and Access Management (IAM) Technical SME to support modernization of identity governance and role-based access control for a large public university. This position is contingent on contract award, with an anticipated start date of February 2027. The SME will lead identity governance and role engineering, including the design of the role model, joiner-mover-leaver lifecycle, access certifications, and segregation-of-duties controls across Workday, Microsoft Entra ID, and third-party applications. The role includes assessing identity governance maturity, facilitating stakeholder workshops, and producing clear, accessible deliverables. DUIT is a Maryland-based identity and cybersecurity firm working in AI, cybersecurity, and federal compliance. The company describes its culture as mission-driven and offers competitive salaries, benefits, paid holidays and PTO, educational reimbursement, employee recognition, and advancement opportunities.

Requirements

At least 7 years of experience in identity and access management, including at least 3 years in identity governance and administration (IGA).
Hands-on role engineering and role mining experience in an enterprise environment.
Experience with Microsoft Entra ID Governance (access reviews, entitlement management, Lifecycle Workflows, and PIM) or a comparable IGA platform such as SailPoint or Saviynt.
Working knowledge of SAML, OpenID Connect, SCIM, and Active Directory.
Strong facilitation and writing skills, including the ability to explain access decisions to non-technical owners.

Nice To Haves

Identity experience in higher education, including multiple affiliations such as students, faculty, adjuncts, and alumni; familiarity with FERPA and the eduPerson schema.
Certifications such as SailPoint IdentityNow Engineer, Microsoft SC-300, CISSP, or CIAM.
Experience aligning IAM programs to NIST CSF 2.0 or NIST SP 800-53.

Responsibilities

Assess identity governance maturity and design access governance, role management, and operating model frameworks.
Engineer a layered RBAC model covering birthright, functional, and application roles through role mining and stakeholder workshops.
Define joiner, mover, and leaver lifecycle processes and map them to Entra ID Lifecycle Workflows and entitlement management.
Design risk-tiered access reviews, access request workflows, and segregation-of-duties rules.
Assess third-party applications for SSO, SCIM provisioning, and role alignment; govern service accounts and app registrations.
Lead requirements workshops with business units and write clear, accessible deliverables.