Identity and Access Management Specialist

Booz Allen Hamilton•McLean, VA

1d•$86,800 - $198,000•Remote

About The Position

The Opportunity: You know that the user is the last frontier for cybersecurity. It’s where the perimeter is drawn, and securing identities is pivotal in the fight against cybercriminals. As an Identity and Access Management (IAM) specialist, you have the skills and experience to keep hackers from taking data and breaking processes. We’re looking for someone like you to help our clients meet their missions without disruption. As an IAM engineer at Booz Allen, you’ll play a critical role in the world of identity and access management and zero trust. In this role, you’ll support large-scale IAM projects for our clients. You’ll interface with stakeholders and engineering teams to delve into the details and dependencies of critical processes and users’ roles within them. You’ll analyze the identity lifecycle, articulating access requirements and defining enterprise identity records. You’ll use your experience in IAM to design, deploy, and support systems that verify appropriate user privileges and manage credentials for accessing our clients’ most valuable assets. From single sign-on to privileged access systems, you’ll have the chance to implement enterprise-class solutions and stop adversaries in their tracks. Join us. The world can’t wait.

Requirements

Experience with Delinea Secret Server or PAM tools for managing privileged access
Experience with engineering and customizing workflows within Delinea Secret Server, including defining roles, permissions, and automated access policies
Experience installing, configuring, managing, and troubleshooting Delinea Secret Server to ensure optimal performance and reliability
Knowledge of integrating Delinea Secret Server with IAM/PAM tools, authentication protocols, such as SSO, MFA, LDAP, and Active Directory, and cloud platforms such as AWS and Azure
Knowledge of role-based access controls, credential rotation, and privileged session monitoring
Ability to troubleshoot, support and optimize Delinea infrastructure and integrations
Ability to design and implement secure workflows and access policies aligned with least privilege principles
TS/SCI clearance
HS diploma or GED

Nice To Haves

Experience architecting and deploying Delinea Secret Server, CyberArk, or BeyondTrust PAM including vault configuration, role-based access controls, automated password rotation, API integrations for seamless workflow automation, and designing high availability (HA) architectures for mission-critical environments
Experience with identity governance processes and entitlement management programs
Knowledge of system, network, application, and security architectures, cybersecurity solutions, key cyber processes such as incident handling, risk measurement, and change management, and key cyber threats, including nation state actors, malware or ransomware, command and control infrastructures, and mitigations
TS/SCI clearance with a polygraph

Responsibilities

Support large-scale IAM projects for clients.
Interface with stakeholders and engineering teams to understand critical processes and user roles.
Analyze the identity lifecycle, articulate access requirements, and define enterprise identity records.
Design, deploy, and support systems that verify user privileges and manage credentials.
Implement enterprise-class solutions like single sign-on and privileged access systems.
Troubleshoot, support, and optimize Delinea infrastructure and integrations.
Design and implement secure workflows and access policies aligned with least privilege principles.