> Markdown version of [/jobs/ext/4182595-identity-and-access-management-iam-technical-sme](https://www.wearedevelopers.com/jobs/ext/4182595-identity-and-access-management-iam-technical-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Identity and Access Management (IAM) Technical SME

- **Company:** DUIT, LLC
- **Location:** Halethorpe, MD, United States
- **Experience:** Experienced
- **Salary:** $135,000.0 - $165,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Identity and Access Management, Role-Based Access Control, Openid Connect, Azure Active Directory, Security Assertion Markup Language (SAML), National Institute of Standards and Technology Cybersecurity Framework, Customer Identity Access Management, SailPoint
- **Published:** October 13, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=95a4dbab9ab39d64

## About the Role

* 7+ years in identity and access management, with at least 3 years in identity governance and administration (IGA).

 * Hands-on role engineering and role mining experience in an enterprise environment.

 * Experience with Microsoft Entra ID Governance (access reviews, entitlement management, Lifecycle Workflows, PIM) or a comparable IGA platform such as SailPoint or Saviynt.

 * Working knowledge of SAML, OpenID Connect, SCIM, and Active Directory.

 * Strong facilitation and writing skills; able to explain access decisions to non-technical owners.

Preferred:

 * Identity work in higher education (multiple affiliations, students, faculty, adjuncts, alumni) and familiarity with FERPA and the eduPerson schema.

 * Certifications such as SailPoint IdentityNow Engineer, Microsoft SC-300, CISSP, or CIAM.

 * Experience aligning IAM programs to NIST CSF 2.0 or NIST SP 800-53.

## Description

* Assess identity governance maturity and design the access governance, role management, and operating model frameworks.

 * Engineer a layered RBAC model (birthright, functional, and application roles) through role mining and stakeholder workshops.

 * Define joiner, mover, and leaver lifecycle processes and map them to Entra ID Lifecycle Workflows and entitlement management.

 * Design risk-tiered access reviews, access request workflows, and segregation-of-duties rules.

 * Assess third-party applications for SSO, SCIM provisioning, and role alignment, and govern service accounts and app registrations.

 * Lead requirements workshops with business units and write clear, accessible deliverables.