ICAM Policy Analyst

The Identity, Credential, and Access Management (ICAM) Policy Analyst is responsible for evaluating, developing, and aligning enterprise ICAM policy frameworks, governance structures, and security standards.

This role bridges technical identity architecture and regulatory compliance across complex federal, defense, or enterprise environments.

The ICAM Policy Analyst ensures that identity lifecycle management, digital identity standards, access control models, and Zero Trust Architecture mandates are fully compliant with federal directives, defense standards, and NIST guidelines.

· Draft, review, update, and operationalize enterprise-level ICAM governance documents, strategic roadmaps, policy directives, and Standard Operating Procedures (SOPs).

· Align agency identity policies with federal mandates, including OMB M-22-09, OMB M-19-17, Executive Order 14028, HSPD-12, NIST SP 800-63 (Digital Identity Guidelines), NIST SP 800-53, and DoD ICAM strategies.

· Provide policy oversight and compliance guidance for technical capabilities including PKI, PIV/CAC integration, Single Sign-On (SSO), Federated Identity (SAML, OIDC/OAuth 2.0), Privileged Access Management (PAM), and Identity Governance and Administration (IGA).

· Evaluate access control policies (Attribute-Based Access Control / ABAC and Role-Based Access Control / RBAC) to ensure policy definitions directly support Zero Trust Architecture (ZTA) pillars and micro-segmentation strategies.

· Perform gap analyses, policy reviews, and risk assessments on legacy and emerging systems to identify compliance shortfalls relative to federal identity standards and security baselines.

· Lead policy working groups, inter-agency ICAM forums, and consensus-building sessions with enterprise architects, cybersecurity officers, system owners, and program managers.

· Prepare compliance artifacts, policy briefs, decision memos, and executive presentations for agency leadership, inspectors general, or external audit bodies.