ActioNet

Cloud, cybersecurity, and agile software solutions

IDMS Subject Matter Expert

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeSuitland-Silver Hill, MD, USA$230k - $265k

About the Job

Requirements

At least 8 years of progressive experience in enterprise identity and access management, directory services, identity engineering, cybersecurity, systems engineering, or a related discipline.
Strong hands-on experience with Microsoft Active Directory and Microsoft Entra ID.
Strong knowledge of SAML, OAuth 2.0, OpenID Connect, LDAP, multifactor authentication, single sign-on, role-based access control, federation, and identity lifecycle management.
Experience designing identity and access management solutions across enterprise, cloud, hybrid-cloud, mobile, and application environments.
Experience integrating identity services with enterprise applications, APIs, cloud platforms, mobile-device management or unified endpoint management, and security services.
Demonstrated knowledge of Zero Trust identity principles, least privilege, privileged access, device identity, and risk-based authentication.
Experience troubleshooting complex enterprise authentication and authorization issues.
Experience developing architecture diagrams, technical requirements, integration specifications, standards, and operational documentation.
Working knowledge of National Institute of Standards and Technology security controls and federal cybersecurity environments.
Strong written and verbal communication skills and the ability to collaborate across engineering, security, architecture, application, and program teams.

Responsibilities

Serve as the senior technical subject matter expert for enterprise identity-management and directory-service architecture, engineering, integration, modernization, and troubleshooting.
Assess current identity and directory architectures, configurations, integrations, security controls, operational processes, dependencies, scalability, and technical debt.
Develop and maintain current-state, target-state, and transition architectures for identity-management capabilities supporting enterprise and field solutions.
Design and support enterprise single sign-on, federation, authentication, authorization, multifactor authentication, and identity lifecycle-management capabilities.
Support Microsoft Entra ID integration, Conditional Access, multifactor authentication, role-based access control, identity lifecycle management, device identity, risk-based access, compliance checks, automated remediation, and other Zero Trust controls associated with the endpoint environment.
Design identity and access patterns for applications operating on USPS Android devices, including secure transitions between USPS and Government Agency application contexts.
Support identity integration between Microsoft Intune and Entra ID, USPS unified endpoint management capabilities, Government Agency applications, APIs, enterprise directories, public key infrastructure, cloud environments, and security-monitoring platforms.
Design and troubleshoot federation using SAML 2.0, OAuth 2.0, OpenID Connect, and related identity standards.
Support certificate-based authentication, PIV/CAC integration, application certificates, public key infrastructure, secrets, service identities, and non-human identities as required.
Define and evaluate role-based access control, least-privilege, privileged-access, service-account, and administrative-access models.
Evaluate identity dependencies during cloud, application, mobile, and infrastructure modernization initiatives.
Develop identity architecture diagrams, interface definitions, technical standards, security patterns, operating procedures, and integration documentation.
Participate in architecture reviews, technical design reviews, enterprise architecture review board activities, engineering working groups, requirements sessions, and solution assessments.
Perform root-cause analysis for complex authentication, authorization, provisioning, federation, directory, synchronization, and application-access issues.
Provide technical guidance, mentoring, and knowledge transfer to engineering, application, security, cloud, and operations teams.

Desired Qualifications

Experience with Okta Workforce Identity, Adaptive MFA, federation, lifecycle management, or comparable Identity-as-a-Service capabilities.
Experience with OpenText or NetIQ Identity Manager, eDirectory, Identity Console, or comparable enterprise identity-orchestration platforms.
Experience with Microsoft Intune and device-based Conditional Access.
Experience with PIV/CAC and federal public key infrastructure environments.
Experience supporting identity services hosted in AWS GovCloud or Azure Government.
Experience with PowerShell, Python, Java, REST APIs, or other identity automation and integration.
ServiceNow integration and ITIL-based operations experience.
Experience supporting a federal statistical agency, large civilian agency, or comparably complex federal environment.
Relevant certifications in Microsoft Identity, Okta, cloud security, identity and access management, cybersecurity, or identity governance.

Description

Job Title: IDMS Subject Matter Expert

Location: Hybrid - 2 days a week on-site - Suitland, MD

Salary: 230-265K

Summary

The IDMS Subject Matter Expert will provide senior technical expertise in enterprise identity, directory, authentication, authorization, federation, and access-management services supporting the Government Agency's modernization initiatives. The role will support current-state assessment, target-state architecture, modernization, integration, and operational-readiness activities performed under the Government Agency contract.
The SME will work across Government Agency enterprise architecture, cybersecurity, infrastructure, cloud, application, mobility, and project teams to ensure identity services are securely integrated into enterprise and field solutions. A major focus will be supporting the identity architecture required for large-scale field operations, including integration between Government Agency identity services, Microsoft Entra ID / Intune, Government Agency applications, and USPS-operated Android mobile devices. The role will help enable secure transitions between USPS and Government Agency applications while meeting SSO, MFA, device-identity, and Zero Trust requirements.
Key Responsibilities
- Serve as the senior technical SME for enterprise identity-management and directory-service architecture, engineering, integration, modernization, and troubleshooting.
- Assess current identity and directory architectures, configurations, integrations, security controls, operational processes, dependencies, scalability, and technical debt.
- Develop and maintain current-state, target-state, and transition architectures for identity-management capabilities supporting Government Agency enterprise and field solutions.
- Design and support enterprise SSO, federation, authentication, authorization, MFA, and identity lifecycle-management capabilities.
- Support Microsoft Entra ID integration, Conditional Access, MFA, RBAC, identity lifecycle management, device identity, risk-based access, compliance checks, automated remediation, and other Zero Trust controls associated with the Government Agency endpoint environment.
- Design identity and access patterns supporting Government Agency applications operating on USPS Android devices, including secure transitions between USPS and Government Agency application contexts.
- Support identity integration between Microsoft Intune / Entra ID, USPS UEM capabilities, Government Agency applications, APIs, enterprise directories, PKI, cloud environments, and security-monitoring platforms.
- Design and troubleshoot federation using SAML 2.0, OAuth 2.0, OpenID Connect, and related identity standards.
- Support certificate-based authentication, PIV/CAC integration, application certificates, PKI, secrets, service identities, and non-human identities as required.
- Define and evaluate RBAC, least-privilege, privileged-access, service-account, and administrative-access models.
- Evaluate identity dependencies during cloud, application, mobile, and infrastructure modernization initiatives.
- Develop identity architecture diagrams, interface definitions, technical standards, security patterns, operating procedures, and integration documentation.
- Participate in architecture reviews, technical design reviews, eARB activities, engineering working groups, requirements sessions, and solution assessments.
- Perform root-cause analysis for complex authentication, authorization, provisioning, federation, directory, synchronization, and application-access issues.
- Provide technical guidance, mentoring, and knowledge transfer to engineering, application, security, cloud, and operations teams.
Requirements
Required Qualifications
- 8+ years of progressive experience in enterprise IAM, directory services, identity engineering, cybersecurity, systems engineering, or a related discipline.
- Strong hands-on experience with Microsoft Active Directory and Microsoft Entra ID.
- Strong knowledge of SAML, OAuth 2.0, OpenID Connect, LDAP, MFA, SSO, RBAC, federation, and identity lifecycle management.
- Experience designing IAM solutions across enterprise, cloud, hybrid-cloud, mobile, and application environments.
- Experience integrating identity services with enterprise applications, APIs, cloud platforms, mobile-device management / UEM, and security services.
- Demonstrated knowledge of Zero Trust identity principles, least privilege, privileged access, device identity, and risk-based authentication.
- Experience troubleshooting complex enterprise authentication and authorization issues.
- Experience developing architecture diagrams, technical requirements, integration specifications, standards, and operational documentation.
- Working knowledge of NIST security controls and federal cybersecurity environments.
- Strong written and verbal communication skills with the ability to collaborate across engineering, security, architecture, application, and program teams.
Preferred Qualifications
- Experience with Okta Workforce Identity, Adaptive MFA, federation, lifecycle management, or comparable Identity-as-a-Service capabilities.
- Experience with OpenText / NetIQ Identity Manager, eDirectory, Identity Console, or comparable enterprise identity-orchestration platforms.
- Experience with Microsoft Intune and device-based Conditional Access.
- Experience with PIV/CAC and federal PKI environments.
- Experience supporting identity services hosted in AWS GovCloud or Azure Government.
- PowerShell, Python, Java, REST API, or other identity automation and integration experience.
- ServiceNow integration and ITIL-based operations experience.
- Experience supporting a federal statistical agency, large civilian agency, or comparably complex federal environment.
- Relevant certifications in Microsoft Identity, Okta, cloud security, IAM, cybersecurity, or identity governance.
Core Competencies
- Enterprise identity architecture and engineering
- Identity lifecycle and account orchestration
- SSO, federation, MFA, and PIV integration
- Cloud and hybrid IAM modernization
- Mobile and device identity integration
- Complex identity troubleshooting
- Security, compliance, and Zero Trust
- Automation, integration, and technical documentation

Core Capabilities:

Advanced and Managed IT Services
Agile Software Development
DevSecOps
Cybersecurity
Health IT
C4ISR & SIGINT
Data Center Engineering & Operations
Engineering & Installation

Why ActioNet?

At ActioNet, our Passion for Quality is at the heart of everything we do:

Commitment to Employees: We are committed to making ActioNet a great place to work and continue to invest in our ActioNeters.
Commitment to Customers: We are committed to our customers by driving and sustaining Service Delivery Excellence.
Commitment to Community: We are committed to giving back to our community, helping others, and making the world a better place for our next generation.

ActioNet is proud to be named a Top Workplace for the twelfth year in a row (2014 - 2025). We have a 98% customer retention rate. We are passionate about the inspirational missions of our customers, and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health, and well-being of our nation.

What's in It For You?

As an ActioNeter, you get to be part of an exceptional team and a corporate culture that nurtures mutual success for our customers, employees, and communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy, and a desire to develop your skills, experience, and career. Are you ready to make a difference?

ActioNet is an equal-opportunity employer and values inclusion at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Full-Time Employees are eligible to participate in our ActioNet’s Benefits Program:

Medical Insurance
Vision Insurance
Dental Insurance
Life and AD&D Insurance
401(k) Savings Plan
Education and Professional Training
Flexible Spending Accounts (FSA)
Employee Referral and Merit Recognition Programs
Employee Assistance and Identity Theft Protection
Paid Holidays: 11 per year
Paid Time Off (PTO)
Disability Insurance

ActioNet is an equal opportunity employer and value inclusion at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

********Direct Applicants, only. No Agencies, No third-party recruiters, please********

About the Company

ActioNet

Cloud, cybersecurity, and agile software solutions

ActioNet provides IT solutions focused on cloud-based services, cyber security, and agile software engineering. It helps clients design, implement, and manage secure cloud environments and software projects using agile methods and IT service management practices. The company combines technical expertise with rigorous process frameworks (CMMI-DEV and CMMI-SVC at Level 4, ISO 27001/20000/9001, HDI) and PMI/ITIL methodologies to deliver reliable, scalable IT services. It differentiates itself through its strong certifications, compliance standards, woman-owned status, recognized financial stability, and awards, alongside a client-centric, mission-focused approach. The company’s goal is to help customers achieve measurable outcomes by delivering secure, compliant, and efficiently managed IT solutions that align with their missions and budgets.

Company size: 501-1,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Vienna, VA
Founded: 1998

Recently Posted Jobs

Explore more opportunities at ActioNet

See more jobs