CMS- ICAM Policy Analyst

About the role

We are seeking a mid-level Identity Policy Analyst to support a federal government client's identity, credential, and access management (ICAM) program. This role assesses the current identity and access environment, identifies gaps against federal policy and target-state architectures, and delivers actionable recommendations and support that advance the agency's Zero Trust and ICAM modernization goals.

What you'll do

• Assess the current-state identity, credential, and access management (ICAM) environment, including systems, processes, and governance, to establish a clear baseline of existing capabilities.

• Identify gaps between current-state ICAM capabilities and target-state requirements, including alignment with Zero Trust principles and maturity models (e.g., CISA Zero Trust Maturity Model, NIST SP 800-207).

• Develop findings, risk-informed recommendations, and prioritized roadmaps to close identified gaps and advance ICAM and Zero Trust maturity.

• Interpret and apply relevant federal policy, guidance, and frameworks, including GSA's Federal Identity, Credential, and Access Management (FICAM) Playbook, NIST SP 800-63 (Digital Identity Guidelines), NIST SP 800-207 (Zero Trust Architecture), OMB M-22-09 (Federal Zero Trust Strategy), HSPD-12, and FISMA.

• Translate policy and framework requirements into practical, actionable guidance for technical teams, program leadership, and agency stakeholders.

• Support development of ICAM strategy documents, implementation plans, and governance artifacts, such as policy briefs, assessment reports, and roadmaps.

• Collaborate with cross-functional teams, including engineering, cybersecurity, and program management, to ensure recommendations are technically sound and operationally feasible.

• Prepare clear, well-organized written products and briefings for both technical and executive audiences.

• Monitor evolving federal identity and Zero Trust policy, guidance, and standards, and assess their impact on the program.

• Support governance and compliance activities related to identity, such as control assessments, audits, and reporting.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Public Policy, or a related field, and 4+ years of relevant experience; or 6+ years of relevant experience in lieu of a degree.

• Demonstrated experience with identity, credential, and access management (ICAM) programs, cybersecurity policy, or federal IT policy and compliance.

• Working knowledge of GSA's FICAM Playbook and its application to agency ICAM programs.

• Familiarity with Zero Trust principles and frameworks, including NIST SP 800-207 and OMB's Federal Zero Trust Strategy (M-22-09).

• Understanding of federal identity and security guidance, including NIST SP 800-63, HSPD-12, and FISMA.

• Experience assessing current-state environments, performing gap analyses, and developing practical recommendations and roadmaps.

• Strong analytical, critical-thinking, and problem-solving skills, with the ability to synthesize policy and technical information.

• Excellent written and verbal communication skills, with experience briefing both technical staff and program/agency leadership.

• Ability to work collaboratively with technical, policy, and program stakeholders across a government engagement.

• Must be eligible to obtain a Public Trust government security clearance.

Preferred Qualifications

• Prior experience directly supporting a federal ICAM, Zero Trust, or identity governance program.

• Relevant certification such as CAP, CISSP, or CISA.

• Familiarity with NIST SP 800-53 security controls and their intersection with identity and access management.

The salary range for this role is $120,000 to $135,000 annually.

Easy Dynamics is an equal opportunity employer. Applicants are considered for positions without discrimination on the basis of race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, veteran status or any other consideration made unlawful by applicable federal state or local laws.