Access Management Engineer

Easy Dynamics is seeking an Identity, Credential, and Access Management (ICAM) Access Management Engineer with deep understanding and experience in federal identity policies, guidance, and technical implementations. The Engineer should be skilled in ICAM enabling technologies, including Microsoft Azure Active Directory (Entra), in order to work with clients on formulating, designing and evaluating architectures and technical solutions. Other key activities include drafting target-state business and technology processes, drive ICAM compliance to federal (NIST) guidance and standards and provide an authoritative ICAM technology voice to internal and external stakeholders. The candidate will be part of an enterprise wide federal ICAM program.

Responsibilities:

• Work with a variety of internal and external ICAM program stakeholders to execute on a strategic ICAM roadmap
• Develop automation scripts using Microsoft Graph and/or Azure PowerShell/CLI modules to manage Azure AD (Entra)
• Lead and facilitate meetings with program team members and client stakeholders to drive ICAM target-state capabilities
• Provide an authoritative voice on ICAM standards, policies, and technical implementations for the benefit of other program members
• Translate complex technical issues to high-level messages targeted for non-technical stakeholders
• Author and review Knowledge Based (KB) articles to effectively disseminate knowledge to the rest of the ICAM program
• Perform risk management activities, to include providing mitigation strategies
• Participate in long term planning and vendor engagement working sessions
• Demonstrate strong problem-solving mindset with the ability to perform stakeholder analysis for complex programs 
• Work cross-functionally across program teams

Qualifications:

• Experience working directly on large scale ICAM implementations (preferably Federal government), with a strong understanding of FiCAM Architecture and Playbooks & FPKI concepts and their relationship to PIV, Derived PIV, and Azure AD CBA
• Experience working using agile methods and scrum process
• Demonstrated ability to understand complex technical issues at a high-level and communicate them to non-technical stakeholders
• Excellent diagnostic, critical thinking, and analytical skills
• Ability to understand business challenges and identify and recommend appropriate strategies and technical solutions
• 5+ years of maintaining Active Directory and Azure AD Connect
•  2+ years of Azure CLI and/or Azure AD PowerShell Modules
• 2+ years of developing maintaining, and/or troubleshooting SAML based applications (as a developer or sys admin)
• 2+ years of developing, maintaining, and/or troubleshooting OIDC/OAuth 2.0 applications (as a developer or sys admin)
• Strong understanding Azure AD (Entra) concepts, including: Enterprise applications, app registrations, managed identities, and service principals; Conditional access framework, authentication strengths, and their relationship to NIST 800-63B; SCIM and Azure AD (Entra) User Provisioning; and Azure AD (Entra) B2C and deploying Identity Experience Framework (IEF) Policies
• Experience with using GitHub as source control for scripts or apps, and as a tool for change management (CI/CD)
• Bachelor’s degree or higher required
• US Citizenship required
• Ability to obtain a U.S. Government clearance