ICAM Controls SME

Digital Global Connectors•Las Vegas, NV

5d•$135,000 - $165,000

About The Position

Digital Global Connectors (DGC) is seeking an experienced Identity, Credential, and Access Management (ICAM) Controls Subject Matter Expert to support the Department of the Air Force (DAF) ICAM Program Management Office (PMO) with System and Organization Controls (SOC) 1 audit readiness. The role evaluates, documents, tests, and improves enterprise identity governance and access management controls, with a focus on identity lifecycle management, role and attribute mapping, Segregation of Duties (SoD), privileged access governance, and technical control evidence supporting financial audit-readiness objectives. The SME works with Government stakeholders, identity governance teams, Privileged Access Management (PAM) organizations, operations and sustainment personnel, and external service providers to assess control effectiveness and develop traceable audit evidence suitable for Independent Public Accountant review. The position requires hands-on experience with Okta Identity Provider and SailPoint IdentityIQ, knowledge of federal identity governance requirements, and the ability to translate technical configurations into control narratives and audit evidence. The position is full-time and located in Washington, DC. The posting does not specify whether work is onsite, hybrid, or remote. The salary range is $135,000–$165,000 annually. Candidates must be able to obtain and maintain a Government position of trust/Public Trust determination, Common Access Card (CAC), and NIPRNet access. To apply, submit your application for consideration. DGC is an Equal Opportunity Employer.

Requirements

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field from an accredited college or university.
At least 6 years of professional experience in Identity Governance and Administration (IGA), Identity and Access Management (IAM) engineering, or ICAM controls evaluation.
Hands-on configuration or administration experience with Okta Identity Provider and SailPoint IdentityIQ.
Experience evaluating identity lifecycle processes, including automated provisioning, deprovisioning, and access recertification workflows.
Strong knowledge of enterprise identity governance, access authorization, role management, and entitlement administration.
Experience developing, documenting, or testing SoD rules, exception approvals, and remediation processes.
Familiarity with privileged access management concepts and technologies, including CyberArk or comparable platforms.
Ability to analyze technical identity configurations and translate findings into control narratives, testing documentation, and audit evidence.
Experience assessing control completeness, timeliness, accuracy, and effectiveness.
Ability to identify inappropriate access, stale privileges, orphaned accounts, and other identity governance control weaknesses.
Strong understanding of the relationship between identity governance platforms, access controls, and audit-readiness requirements.
Ability to collaborate with PAM, O&S, enablement, and Government organizations without assuming operational ownership of externally managed functions.
Strong analytical, problem-solving, technical documentation, and organizational skills.
Excellent written and verbal communication skills.
DoDM 8140.03 baseline certification appropriate to assigned privileged access responsibilities.
Ability to obtain and maintain the required Government position of trust/Public Trust determination, CAC, and NIPRNet access.

Nice To Haves

Previous experience supporting SOC 1 or SSAE 18 audit engagements, particularly involving identity governance or federal financial-system controls.
Experience supporting DoD or Department of the Air Force cybersecurity, ICAM, or audit-readiness initiatives.
Familiarity with FIAR objectives, control documentation, and audit evidence requirements.
Experience supporting IPA reviews, control testing, or financial audit-readiness assessments.
Experience evaluating service-provider SOC reports and documenting their impact on organizational control environments.
Knowledge of SSO and identity federation protocols, including SAML and OAuth 2.0.
Understanding of Zero Trust Architecture principles and their application to enterprise identity governance.
Experience supporting DoD Zero Trust, Mission Partner Environment ICAM, or data-federation initiatives.
Experience with Salesforce, ServiceNow, or GRC tools for control tracking, documentation, and performance reporting.
Familiarity with NIST SP 800-171 and CUI handling requirements within identity governance environments.
Experience supporting privileged access evidence collection, inventory reconciliation, or control validation.
Experience identifying opportunities to automate identity governance controls and audit evidence collection.
Additional relevant certifications preferred, including CISSP, CISA, CISM, CompTIA Security+, CRISC, CIAM, Okta or SailPoint IdentityIQ certifications, or other relevant DoDM 8140.03-aligned cybersecurity, identity governance, or information systems audit certifications.

Responsibilities

Evaluate and document enterprise identity lifecycle processes, including joiner, mover, and leaver workflows, and identify auditable control points.
Assess and test automated and manual identity provisioning, modification, deprovisioning, access recertification, and orphaned-account controls for effectiveness, timeliness, completeness, and accuracy.
Evaluate identity governance capabilities, role and attribute mappings, RBAC and ABAC configurations, entitlements, and access authorization workflows.
Document and test SoD rules, preventive and detective controls, exception approvals, compensating controls, and periodic review procedures.
Coordinate with PAM organizations to evaluate privileged access governance, reconcile privileged-account inventories, validate evidence, and identify stale or unauthorized privileges without assuming operational ownership of externally managed PAM functions.
Evaluate Okta and SailPoint IdentityIQ configurations and workflows, translate system records into control evidence, and support the D003 control traceability matrix.
Support DAF ICAM PMO SOC 1 audit readiness by developing control narratives, process descriptions, control mappings, testing documentation, and evidence suitable for IPA review.
Review upstream service-provider SOC reports, including Okta and AWS, and document their relevance to DAF ICAM controls.
Identify control deficiencies, evidence gaps, manual dependencies, and risks, and recommend improvements to controls, testing, documentation, and evidence collection.
Support Financial Improvement and Audit Remediation (FIAR) target metrics and reporting requirements.
Evaluate ICAM controls against applicable DoD cybersecurity requirements, NIST controls, federal requirements, and Zero Trust principles; apply CUI handling requirements when reviewing records and evidence.
Coordinate evidence collection and control validation across Government stakeholders, PAM organizations, O&S teams, enablement organizations, and other parties.
Prepare control assessment summaries, audit-readiness reports, and technical findings; communicate complex concepts to technical and non-technical audiences.
Support continuous improvement of ICAM control effectiveness and audit readiness while respecting established Government operational responsibilities.