Everforth ECS is seeking an Identity and Access Management Lead to work in our Arlington, VA office/remote.
The Lead IAM Engineer will serve as the primary subject matter expert for Identity and Access Management within the CDM program's Security Engineering team. This individual will be responsible for designing, implementing, and maturing IAM capabilities across the CDM BETSIE environment, with a focus on access governance, least privilege enforcement, privileged access management, and federal compliance alignment.
Key Responsibilities
- Design and implement a formal RBAC framework across CDM BETSIE and associated environments, including EntraID and AWS
- Establish and enforce least privilege policies in alignment with Zero Trust Architecture principles and federal directives
- Develop and manage identity lifecycle processes for joiners, movers, and leavers across the program, ensuring timely provisioning and deprovisioning
- Implement and manage a Privileged Access Management (PAM) program including identification, governance, and monitoring of privileged accounts
- Lead access review and audit processes to support PAR/RAR reporting requirements and ongoing compliance obligations
- Develop and maintain role-to-privilege mappings and job function definitions across the program to eliminate access ambiguity
- Collaborate with program leadership, system owners, and HR to ensure IAM policies align with organizational changes and personnel transitions
- Produce IAM metrics, reports, and dashboards to communicate access risk and governance posture to program leadership
- Serve as the IAM subject matter expert for CDM program compliance activities, audits, and government stakeholder engagements
Salary: $126,000 - $189,000
General Description of Benefits
Preferred Qualifications- 5+ years of experience in Identity and Access Management in a complex enterprise or federal environment
- Demonstrated expertise with Microsoft EntraID (Azure AD) including conditional access, role assignments, and identity governance
- Hands-on experience with AWS IAM, including policies, roles, permission boundaries, and access analysis tools
- Strong knowledge of RBAC design, least privilege principles, and Zero Trust Architecture frameworks
- Experience supporting or implementing PAM solutions and privileged account governance
- Familiarity with CDM program requirements, PAR/RAR processes, and federal ICAM policies
- Experience conducting access reviews, audits, and compliance reporting
- Strong documentation and communication skills with the ability to present complex IAM concepts to both technical and non-technical stakeholders
Skills Required
- 5+ years of Identity and Access Management experience in a complex enterprise or federal environment
- Expertise with Microsoft Entra ID or Azure AD, including conditional access, role assignments, and identity governance
- Hands-on experience with AWS IAM, including policies, roles, permission boundaries, and access analysis tools
- Strong knowledge of RBAC design, least privilege principles, and Zero Trust Architecture frameworks
- Experience supporting or implementing PAM solutions and privileged account governance
- Familiarity with CDM program requirements, PAR/RAR processes, and federal ICAM policies
- Experience conducting access reviews, audits, and compliance reporting
- Strong documentation and communication skills, including presenting complex IAM concepts to technical and non-technical stakeholders
ECS Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about ECS and has not been reviewed or approved by ECS.
-
Healthcare Strength — ECS advertises multiple national-network medical plan options with HSA eligibility alongside dental and vision coverage. Coverage generally begins quickly and is paired with company-paid short- and long-term disability, adding stability to the health package.
-
Retirement Support — A 401(k) with Safe Harbor and immediate vesting on employer contributions is emphasized, with an employer match available. Access to an employee stock purchase plan via the parent company provides an additional savings avenue.
-
Parental & Family Support — Paid parental leave up to 30 days, adoption assistance, and other family-oriented leaves are highlighted. Feedback suggests these offerings add meaningful value beyond base pay for many roles.
ECS Insights
What We Do
ECS, a segment of ASGN (NYSE: ASGN), delivers advanced solutions and services in cloud, cybersecurity, artificial intelligence (AI), machine learning (ML), application and IT modernization, and science and engineering. The company solves critical, complex challenges for customers across the U.S. public sector, defense, intelligence and commercial industries. ECS maintains partnerships with leading cloud, cybersecurity, and AI/ML providers and holds specialized certifications in their technologies. Headquartered in Fairfax, Virginia, ECS has more than 3,400 employees throughout the U.S. and has been recognized as a Top Workplace by The Washington Post for the last five years.
