IAM Technical SME (Identity Governance and Role Engineering)

DUIT, a Maryland-based identity and cybersecurity firm, is building a team to modernize identity governance and role-based access control for a large public university. You will lead the governance and role engineering work: designing the role model, the joiner-mover-leaver lifecycle, access certifications, and segregation-of-duties controls across Workday, Microsoft Entra ID, and third-party applications. Position is contingent on contract award. Anticipated start: February 2027  

Why work for us?

• No red tape!
• Competitive salaries
• Great Health/Dental/Vision/Other Insurance Benefits
• Excellent 401K plans
• 11 Paid Company Holidays & PTO Tiers
• Educational Reimbursement Programs
  
• Limitless environment where you matter
• Recognition of outstanding work and other employee incentives
• Opportunities for advancement

Davis Unlimited Information Technologies (DUIT) is a Baltimore-based AI and cybersecurity firm working at the cutting edge of post-quantum cryptography, AI development, and federal cybersecurity compliance. Founded in 2010, DUIT supports mission-critical government and critical infrastructure environments — including DoD, and federal civilian agencies. Our leadership team includes a U.S. military veteran with active security clearances, and we proudly support a mission-driven culture that values service, integrity, and national security. We are a federally certified woman-owned and minority-owned small business, giving our team the opportunity to work on high-impact federal contracts and emerging technologies that directly impact national security. "Securing the Future through AI and Quantum-Resilient Innovation."

We have opportunities for advancement, and our salaries and benefits are competitive. We are an equal opportunity employer; check us out on the web at https://www.duit.us. You can follow us on LinkedIn, X, and Facebook. We do things differently, contact us to find out how...Together, we can DUIT!

What you will do 

• Assess identity governance maturity and design the access governance, role management, and operating model frameworks. 

• Engineer a layered RBAC model (birthright, functional, and application roles) through role mining and stakeholder workshops. 

• Define joiner, mover, and leaver lifecycle processes and map them to Entra ID Lifecycle Workflows and entitlement management. 

• Design risk-tiered access reviews, access request workflows, and segregation-of-duties rules. 

• Assess third-party applications for SSO, SCIM provisioning, and role alignment, and govern service accounts and app registrations. 

• Lead requirements workshops with business units and write clear, accessible deliverables. 
  

What you bring 

• 7+ years in identity and access management, with at least 3 years in identity governance and administration (IGA). 

• Hands-on role engineering and role mining experience in an enterprise environment. 

• Experience with Microsoft Entra ID Governance (access reviews, entitlement management, Lifecycle Workflows, PIM) or a comparable IGA platform such as SailPoint or Saviynt. 

• Working knowledge of SAML, OpenID Connect, SCIM, and Active Directory. 

• Strong facilitation and writing skills; able to explain access decisions to non-technical owners. 

Preferred 

• Identity work in higher education (multiple affiliations, students, faculty, adjuncts, alumni) and familiarity with FERPA and the eduPerson schema. 

• Certifications such as SailPoint IdentityNow Engineer, Microsoft SC-300, CISSP, or CIAM. 

• Experience aligning IAM programs to NIST CSF 2.0 or NIST SP 800-53.