ICAM Program Office Senior Strategic Advisor #2055

Compass, Inc•Springfield, VA

42d•Onsite

About The Position

The Subject Matter Expert (SME) provides extremely high-level subject matter expertise for work described in GEOAxIS, Identity, Credential, and Access Management (ICAM). The SME provides advanced technical knowledge and analysis of highly specialized applications and operational environment, high-level functional systems analysis, design, integration, documentation, training, and implementation advice on complex problems which require doctorate level knowledge of the subject matter for effective implementation. The SME applies principles, methods, and knowledge of specific functional areas of expertise to specific ICAM GEOAxIS requirements and provides advice on esoteric problems which require extensive knowledge of the subject matter. The SME designs and prepares technical reports, studies, and related documentation, makes charts and graphs to record results, prepares and delivers presentations, training, and briefings as required by the ICAM Program Office in support of ICAM and GEOAxIS.

Requirements

Demonstrated expertise in NGA's GEOAxiS program; an understanding of the government's approach for the Zero Trust framework and Identity, Credential and Access Management (ICAM).
Familiarity at the Subject Matter Expert level for program technical acquisition strategies that align with IC/DoD Identity and Access Management (IdAM) policies and directives.
Ability to translate business requirements into cloud solutions.
Excellent communication, persuasion, and relationship skills; strong problem identification and problem-solving skills.
Strong writing skills that lead to clear, concise, and unambiguous technical and non-technical documentation.
At least 12 years of experience in the field or in a related area.
Familiar with a variety of the field's concepts, practices, and procedures.
Relies on extensive experience and judgment to plan and accomplish goals and independently performs a wide variety of complicated tasks.
May provide consultation on complex projects and is considered to be the top level contributor/specialist.
May lead and direct the work of others.
May report to an executive or director.
BA/BS or higher degree, or related experience in a business, STEM or IT field.

Nice To Haves

Secure +, CISSP, PMP, SAFe Scaled Agile, Information Technology Infrastructure Library (ITIL) certification.
Knowledge of Artificial Intelligence and Machine Learning (AI/ML) modeling for risk analysis.
Familiarity with Identity Threat Detection and Response (ITDR) and Entity and User Behavior Analytics (UEBA).
In-depth knowledge of Enterprise Cybersecurity principles such as privileged users, Public Key Infrastructure and Post-Quantum Cryptography (PQC).
Microsoft Office skills
15+ years or equivalent of ICAM or relevant IC Agency, or DoW experience.
Excellent oral and written communication skills.
Understanding of information and application security concepts, mechanisms, and tools.
Experience supporting intra- and inter-agency senior leadership and working groups.
Familiarity with IC, DoW, or Federal ICAM systems including current and future architecture and services to include policies such as Zero Trust.
Good understanding of end-user computing and collaboration tools and technologies.
Experience with ICAM IC and DoW standards, directives, policies, procedures, and technology insertion.
Familiarity with risk and schedule management and mitigation.
Familiarity with IC and DoW ICAM Cybersecurity concepts, systems and services, such as attribute and policy federation, multi-factor authentication, and multi-domain requirements.
Familiarity with risk and schedule management and mitigation.

Responsibilities

Assess the current architecture of existing NGA Program/Activities and design the appropriate cloud architecture for those activities. Once the appropriate architecture has been established, work with government and contractor personnel supporting the migrating activity to transition them into the appropriate cloud environment.
Support Identity, Credential and Access Management (ICAM) Zero Trust Architecture (ZTA) Cloud Modernization by developing multi-cloud ICAM strategies and architectures and recommended NGA portfolio and program technical acquisition strategies that align with IC/DoD Identity and Access Management (IdAM) policies and directives.
Analyze IdAM capabilities to develop recommendations for senior level decisionmakers on NGA's IdAM multi-cloud/ZTA capabilities and those of other IC and DoD partners.
Develop recommended courses of action for NGA senior leadership with options for IC Information Technology Enterprise (ITE) Identification Authentication Authorization (IAA) adoption and transition of services when applicable.
Collaborate across agencies (inter-agency) and across NGA (intra-agency) to analyze cyber security vulnerabilities to develop recommendations for senior leadership on matters of ICAM and cybersecurity inter-dependencies, requirements, risks, threats, and prioritized courses of action.
Perform Privilege Access Management (PAM) to verify proper elevated users are monitored for anomalies across multi-cloud environments, and design strong multifactor authentication for all multi-cloud environments.
Implement a phased approach for a zero-trust architecture to verify that everything (non-person entity) and everyone has a known identity reducing the threat of cyber-attacks.
Develop test plans, conduct tests, and document test results for functional requirements developed for ICAM Integration associated with migration activities to demonstrate to the NGA PMO that the migrated Activity performs all the functions of the program to include IdAM.
Analyze migration activities to develop a description of the migrated Activity including the hardware, software, cloud resources, interfaces, data, and security architecture
Perform security testing IAW the NGA cloud security guidance and processes and analyze testing and assist with development of documentation that demonstrates the migrated Activity complies with all required security requirements.