IAM Technical SME (Identity Governance and Role Engineering) 

DUIT, a Maryland-based identity and cybersecurity firm, is building a team to modernize identity governance and role-based access control for a large public university. You will lead the governance and role engineering work: designing the role model, the joiner-mover-leaver lifecycle, access certifications, and segregation-of-duties controls across Workday, Microsoft Entra ID, and third-party applications. Position is contingent on contract award. Anticipated start: February 2027
Why work for us?
No red tape!
Competitive salaries
Great Health/Dental/Vision/Other Insurance Benefits
Excellent 401K plans
11 Paid Company Holidays & PTO Tiers
Educational Reimbursement Programs
Limitless environment where you matter
Recognition of outstanding work and other employee incentives
Opportunities for advancement
Davis Unlimited Information Technologies (DUIT) is a Baltimore-based AI and cybersecurity firm working at the cutting edge of post-quantum cryptography, AI development, and federal cybersecurity compliance. Founded in 2010, DUIT supports mission-critical government and critical infrastructure environments — including DoD, and federal civilian agencies. Our leadership team includes a U.S. military veteran with active security clearances, and we proudly support a mission-driven culture that values service, integrity, and national security. We are a federally certified woman-owned and minority-owned small business, giving our team the opportunity to work on high-impact federal contracts and emerging technologies that directly impact national security. "Securing the Future through AI and Quantum-Resilient Innovation."
We have opportunities for advancement, and our salaries and benefits are competitive. We are an equal opportunity employer; check us out on the web at https://www.duit.us. You can follow us on LinkedIn, X, and Facebook. We do things differently, contact us to find out how...Together, we can DUIT!
What you will do
Assess identity governance maturity and design the access governance, role management, and operating model frameworks.
Engineer a layered RBAC model (birthright, functional, and application roles) through role mining and stakeholder workshops.
Define joiner, mover, and leaver lifecycle processes and map them to Entra ID Lifecycle Workflows and entitlement management.
Design risk-tiered access reviews, access request workflows, and segregation-of-duties rules.
Assess third-party applications for SSO, SCIM provisioning, and role alignment, and govern service accounts and app registrations.
Lead requirements workshops with business units and write clear, accessible deliverables.
What you bring
7+ years in identity and access management, with at least 3 years in identity governance and administration (IGA).
Hands-on role engineering and role mining experience in an enterprise environment.
Experience with Microsoft Entra ID Governance (access reviews, entitlement management, Lifecycle Workflows, PIM) or a comparable IGA platform such as SailPoint or Saviynt.
Working knowledge of SAML, OpenID Connect, SCIM, and Active Directory.
Strong facilitation and writing skills; able to explain access decisions to non-technical owners.
Preferred
Identity work in higher education (multiple affiliations, students, faculty, adjuncts, alumni) and familiarity with FERPA and the eduPerson schema.
Certifications such as SailPoint IdentityNow Engineer, Microsoft SC-300, CISSP, or CIAM.
Experience aligning IAM programs to NIST CSF 2.0 or NIST SP 800-53.

Employment type
Full-Time

Work arrangement
Yes