ICAM Policy Analyst

Job Description:

• Assess the current-state identity, credential, and access management (ICAM) environment, including systems, processes, and governance, to establish a clear baseline of existing capabilities
• Identify gaps between current-state ICAM capabilities and target-state requirements, including alignment with Zero Trust principles and maturity models
• Develop findings, risk-informed recommendations, and prioritized roadmaps to close identified gaps and advance ICAM and Zero Trust maturity
• Interpret and apply relevant federal policy, guidance, and frameworks, including the GSA FICAM Playbook, NIST SP 800-63, NIST SP 800-207, OMB M-22-09, HSPD-12, and FISMA
• Translate policy and framework requirements into actionable guidance for technical teams, program leadership, and agency stakeholders
• Support development of ICAM strategy documents, implementation plans, and governance artifacts, including policy briefs, assessment reports, and roadmaps
• Collaborate with engineering, cybersecurity, and program management teams
• Prepare written products and briefings for technical and executive audiences
• Monitor evolving federal identity and Zero Trust policy, guidance, and standards and assess program impacts
• Support identity-related governance and compliance activities, including control assessments, audits, and reporting

Requirements:

• Bachelor's degree in Information Technology, Cybersecurity, Public Policy, or a related field, and 4+ years of relevant experience; or 6+ years of relevant experience in lieu of a degree
• Demonstrated experience with identity, credential, and access management (ICAM) programs, cybersecurity policy, or federal IT policy and compliance
• Working knowledge of GSA's FICAM Playbook and its application to agency ICAM programs
• Familiarity with Zero Trust principles and frameworks, including NIST SP 800-207 and OMB's Federal Zero Trust Strategy (M-22-09)
• Understanding of federal identity and security guidance, including NIST SP 800-63, HSPD-12, and FISMA
• Experience assessing current-state environments, performing gap analyses, and developing practical recommendations and roadmaps
• Strong analytical, critical-thinking, and problem-solving skills, with the ability to synthesize policy and technical information
• Excellent written and verbal communication skills, with experience briefing both technical staff and program/agency leadership
• Ability to work collaboratively with technical, policy, and program stakeholders across a government engagement
• Must be eligible to obtain a Public Trust government security clearance
• Prior experience directly supporting a federal ICAM, Zero Trust, or identity governance program
• Relevant certification such as CAP, CISSP, or CISA
• Familiarity with NIST SP 800-53 security controls and their intersection with identity and access management

Benefits: