Identity and Access Management (IAM) Analyst SME at ASM Research
Fairfax, VA
—
Jul 26, 2026
Fairfax, VA
Jul 28, 2026
What this job asks for AI summary
A senior IAM specialist role supporting a federal government environment, responsible for governing user identities, accounts, and entitlements across enterprise systems. Day-to-day work spans administering IAM platforms, designing access lifecycle workflows, conducting access certifications and audits, and integrating identity controls into the broader security architecture. Suits an experienced IAM practitioner comfortable in highly regulated, compliance-driven settings.
Senior level · 8+ years · Secret clearance
“or” means any one of them counts — you don't need all of them.
Posted 2 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,021 (middle half $99,961–$167,095).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 29, 2026. It is a model, not a headcount.
Why we read it this way (9)
No work location is specified in the posting; CBSA and state are left blank. The role's federal government context and clearance requirement strongly imply a US-based, on-site position.
The degree requirement states 'Bachelor's degree … or equivalent relevant experience,' so no hard degree gate is set.
The clearance requirement reads 'Active SECRET security clearance (or the ability to obtain and maintain one)' — this is treated as a hard gate since the posting explicitly conditions the role on holding or being able to obtain a Secret clearance.
The title carries no explicit seniority level word; 'SME' (Subject Matter Expert) is a functional descriptor rather than a standard career-ladder level, so advertised seniority is set to Unspecified. The 8–12 years of experience and senior/SME capacity language support a Senior classification.
'IAM platforms', 'directory services', 'SSO', 'MFA', and 'privileged access management' are listed under Required Qualifications as capabilities rather than named products; they are marked required accordingly. Named platforms (SailPoint, CyberArk, Okta) appear only under Preferred Qualifications.
SIEM, SOAR, and endpoint security tools appear only in the Preferred Qualifications section. CISSP and CISM certifications are also preferred, not required.
'Access certifications / entitlement reviews' is a concrete, named IAM practice (a distinct workflow type in identity governance) and is retained as a required skill; generic concepts such as 'audit support' and 'least-privilege' are omitted per instructions.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): privileged access management.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.