ICAM Policy Analyst

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Evaluate the existing identity, credential, and access management (ICAM) landscape, encompassing systems, processes, and governance, to establish a comprehensive baseline of current capabilities.

• Identify discrepancies between the current ICAM capabilities and the desired requirements, ensuring alignment with Zero Trust principles and maturity models.

• Formulate findings, risk-informed recommendations, and prioritized roadmaps to address identified gaps and enhance ICAM and Zero Trust maturity.

• Interpret and apply pertinent federal policies, guidance, and frameworks, such as the GSA FICAM Playbook, NIST SP 800-63, NIST SP 800-207, OMB M-22-09, HSPD-12, and FISMA.

• Convert policy and framework requirements into actionable guidance for technical teams, program leadership, and agency stakeholders.

• Assist in the development of ICAM strategy documents, implementation plans, and governance artifacts, including policy briefs, assessment reports, and roadmaps.

• Collaborate with engineering, cybersecurity, and program management teams.

• Create written products and presentations for both technical and executive audiences.

• Track evolving federal identity and Zero Trust policies, guidance, and standards, and evaluate their impacts on programs.

• Facilitate identity-related governance and compliance activities, including control assessments, audits, and reporting.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Public Policy, or a related field, with 4+ years of relevant experience; or 6+ years of relevant experience in the absence of a degree.

• Proven experience with identity, credential, and access management (ICAM) programs, cybersecurity policy, or federal IT policy and compliance.

• Familiarity with GSA's FICAM Playbook and its application to agency ICAM initiatives.

• Understanding of Zero Trust principles and frameworks, including NIST SP 800-207 and OMB's Federal Zero Trust Strategy (M-22-09).

• Knowledge of federal identity and security guidance, including NIST SP 800-63, HSPD-12, and FISMA.

• Experience in evaluating current environments, conducting gap analyses, and crafting practical recommendations and roadmaps.

• Strong analytical, critical-thinking, and problem-solving abilities, with the capacity to synthesize policy and technical information.

• Exceptional written and verbal communication skills, with experience presenting to both technical staff and program/agency leadership.

• Ability to collaborate effectively with technical, policy, and program stakeholders across government engagements.

• Must be eligible to obtain a Public Trust government security clearance.

• Previous experience directly supporting a federal ICAM, Zero Trust, or identity governance program.

• Relevant certifications such as CAP, CISSP, or CISA.

• Familiarity with NIST SP 800-53 security controls and their relation to identity and access management.

🏝️ Benefits

• Competitive salary and comprehensive benefits package.

• Opportunities for professional development and continuing education.

• Collaborative work environment with a focus on innovation and improvement.

• Access to cutting-edge technologies and resources.