Key Responsibilities:
- Lead the enterprise-wide assessment of Agency's current ICAM architecture, identity systems, authentication mechanisms, authorization models, and identity lifecycle capabilities.
- Develop the enterprise ICAM reference architecture supporting: Identity stores, Authentication services, Federation, Authorization, Identity Governance & Administration (IGA), Privileged Access Management (PAM), Non-Human Identity (NHI), API Security and Identity Analytics
- Design a Greenfield enterprise ICAM architecture using modular service decomposition.
- Conduct Analysis of Alternatives (AoA) for enterprise ICAM technologies.
- Develop enterprise migration and modernization roadmaps.
- Define integration architecture for enterprise identity systems.
- Develop enterprise identity data models and authoritative source architecture.
- Produce architecture blueprints, transition architectures, target-state models, and reference architectures.
- Participate in governance boards and architecture review sessions.
- Support enterprise technology selection activities.
- Provide technical leadership during roadmap development.
Policy & Compliance ExpertiseMust demonstrate expert knowledge of:
- Federal Policies
- Executive Order 14028
- OMB M-19-17
- OMB M-22-09
- Homeland Security Presidential Directive (HSPD-12)
- Trusted Workforce 2.0
- NIST Standards
- NIST SP 800-207 (Zero Trust Architecture)
- NIST SP 800-63 Rev. 3/4
- NIST SP 800-53 Rev. 5
- Federal Frameworks
- Federal ICAM Architecture (FICAM)
- CISA Zero Trust Maturity Model v2
- FISMA
- FedRAMPRequired Qualifications
Education - Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or related field.
- Experience
- Minimum 10+ years of enterprise architecture experience.
- Minimum 7+ years of IAM/ICAM architecture experience.
- Experience with large federal agency modernization programs.
- Experience designing Zero Trust architectures.
- Experience developing enterprise roadmaps and governance frameworks
- Experience with Identity Governance, Federation, MFA, PKI, PAM, CIAM, and Identity Analytics.
- Certifications:
- SailPoint / Saviynt / Okta Architect (preferred)
- Key Skills:
- Enterprise Architecture
- Identity Governance
- Zero Trust
- Access Management
- Federation
- Privileged Access Management
- NHI Management
- Federal ICAM Standards
- Cloud Security Architecture
- Strategic Planning
