CMS- ICAM Policy Analyst at Easy Dynamics Corp in McLean, VA; Remote (United States)

Job description

• We are seeking a mid-level Identity Policy Analyst to support a federal government client's identity, credential, and access management (ICAM) program. This role assesses the current identity and access environment, identifies gaps against federal policy and target-state architectures, and delivers actionable recommendations and support that advance the agency's Zero Trust and ICAM modernization goals.

Responsibilities

• Assess the current-state identity, credential, and access management (ICAM) environment, including systems, processes, and governance, to establish a clear baseline of existing capabilities.
• Identify gaps between current-state ICAM capabilities and target-state requirements, including alignment with Zero Trust principles and maturity models (e.g., CISA Zero Trust Maturity Model, NIST SP 800-207).
• Develop findings, risk-informed recommendations, and prioritized roadmaps to close identified gaps and advance ICAM and Zero Trust maturity.
• Interpret and apply relevant federal policy, guidance, and frameworks, including GSA's Federal Identity, Credential, and Access Management (FICAM) Playbook, NIST SP 800-63 (Digital Identity Guidelines), NIST SP 800-207 (Zero Trust Architecture), OMB M-22-09 (Federal Zero Trust Strategy), HSPD-12, and FISMA.
• Translate policy and framework requirements into practical, actionable guidance for technical teams, program leadership, and agency stakeholders.
• Support development of ICAM strategy documents, implementation plans, and governance artifacts, such as policy briefs, assessment reports, and roadmaps.
• Collaborate with cross-functional teams, including engineering, cybersecurity, and program management, to ensure recommendations are technically sound and operationally feasible.
• Prepare clear, well-organized written products and briefings for both technical and executive audiences.
• Monitor evolving federal identity and Zero Trust policy, guidance, and standards, and assess their impact on the program.
• Support governance and compliance activities related to identity, such as control assessments, audits, and reporting.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Public Policy, or a related field, and 4+ years of relevant experience; or 6+ years of relevant experience in lieu of a degree.
• Demonstrated experience with identity, credential, and access management (ICAM) programs, cybersecurity policy, or federal IT policy and compliance.
• Working knowledge of GSA's FICAM Playbook and its application to agency ICAM programs.
• Familiarity with Zero Trust principles and frameworks, including NIST SP 800-207 and OMB's Federal Zero Trust Strategy (M-22-09).
• Understanding of federal identity and security guidance, including NIST SP 800-63, HSPD-12, and FISMA.
• Experience assessing current-state environments, performing gap analyses, and developing practical recommendations and roadmaps.
• Strong analytical, critical-thinking, and problem-solving skills, with the ability to synthesize policy and technical information.
• Excellent written and verbal communication skills, with experience briefing both technical staff and program/agency leadership.
• Ability to work collaboratively with technical, policy, and program stakeholders across a government engagement.
• Must be eligible to obtain a Public Trust government security clearance.
• Prior experience directly supporting a federal ICAM, Zero Trust, or identity governance program.
• Relevant certification such as CAP, CISSP, or CISA.
• Familiarity with NIST SP 800-53 security controls and their intersection with identity and access management.

Skills

Required

• Cybersecurity policy
• Federal IT policy and compliance
• GSA's FICAM Playbook
• Gap analysis
• Risk assessment
• Policy interpretation
• Technical writing
• Briefing

Preferred

• CAP, CISSP, or CISA certification
• NIST SP 800-53 security controls

Benefits

• The salary range for this role is $120,000 to $135,000 annually.