Apply on Employer Site

Booz Allen Hamilton · 4 hours ago

Privileged Account Management Architect

Alexandria, VA

Full-time

Hybrid

Senior Level

$87K/yr - $198K/yr

5+ years exp

Booz Allen Hamilton is a leader in cybersecurity, seeking an Identity and Access Management (IAM) specialist to support large-scale IAM projects. The role involves analyzing the identity lifecycle, defining access requirements, and implementing enterprise-class solutions to secure clients' valuable assets against cyber threats.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Support large-scale IAM projects for our clients

Interface with stakeholders and engineering teams

Analyze the identity lifecycle

Articulate access requirements

Define enterprise identity records

Design, deploy, and support systems that verify appropriate user privileges

Manage credentials for accessing clients’ most valuable assets

Implement enterprise-class solutions to stop adversaries

Qualification

Privileged Access ManagementIdentityAccess ManagementIAM technologiesFederation technologiesCredential vaultingSession monitoringBehavioral analyticsDelinea Secret ServerCyberArkBeyondTrust PAMProblem-solving skillsVerbal communicationWritten communicationCollaboration skills

Required

5+ years of experience with IAM

Experience with privileged access management (PAM) solutions supporting secrets management, endpoint privilege elevation, and server-level session control, with a focus on meeting compliance requirements such as NIST, CIS, and HIPAA, and securing access in cloud-native and hybrid infrastructures

Experience implementing key PAM capabilities such as credential vaulting, just-in-time (JIT) access provisioning, session monitoring and recording, and automated credential rotation, to minimize attack surface and support least privilege access models

Experience with ICAM technologies such as SSO, MFA, PAM, IGA, AD, or LDAP

Experience with federation technologies such as SAML 2.0, OAuth 2.0, and OpenID Connect

Knowledge of PAM concepts, including just-enough access and behavioral analytics

Knowledge of service account lifecycle management, privileged behavior analytics, managing credentials, VPN-less access to Windows, Linux, and UNIX servers

Active TS/SCI clearance; willingness to take a polygraph exam

HS diploma or GED

Preferred

Experience architecting and deploying Delinea Secret Server, CyberArk, or BeyondTrust PAM with a focus on vault configuration, role-based access controls, automated password rotation, API integrations for seamless workflow automation, and designing high availability (HA) architectures for mission-critical environments

Experience with identity governance processes and entitlement management programs

Knowledge of system, network, application, and security architectures, cybersecurity solutions, key cyber processes such as incident handling, risk measurement, and change management, and key cyber threats, including nation-state actors, malware or ransomware, command and control infrastructures, and mitigations

Ability to collaborate with professional confidence and credibility to effectively engage and interact with technologists and leaders across the enterprise

Ability to quickly comprehend complex problems, draw logical conclusions, make sound decisions, develop solutions, and drive closure

Possession of excellent problem-solving skills

Possession of excellent verbal and written communication skills

TS/SCI clearance with a polygraph