Enterprise Directory & Messaging (EDM) Lead
SteerBridge, Quantico, Virginia, United States, 22134
SteerBridge Strategies is a modern technology company delivering innovative, mission-focused solutions to the U.S. Government and private sector.
Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial-grade capabilities that accelerate operational effectiveness and drive measurable mission success.
At the core of SteerBridge is our people-especially the veterans whose leadership, problem-solving mindset, and commitment to excellence elevate every project we support. We don't simply hire exceptional talent;
we cultivate it , creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve.
We are seeking an experienced Enterprise Directory & Messaging (EDM) Lead to design, implement, and oversee enterprise-wide directory services, identity, and access management (IAM) strategies. This role is responsible for establishing secure authentication and authorization frameworks, managing enterprise messaging platforms, and ensuring compliance with regulatory standards.
The ideal candidate will bring hands-on expertise with modern IAM and directory service platforms (cloud, on-prem, and open source) and will be able to design, manage, and enforce access control models across a hybrid enterprise environment. As a senior technical leader, the EDM Lead will collaborate across IT, security, and business teams to modernize IAM capabilities and messaging services while driving adoption of Zero Trust and least privilege principles.
Benefits Health insurance Dental insurance Vision insurance Life Insurance 401(k) Retirement Plan with matching Paid Time Off Paid Federal Holidays Required Skills and Qualifications
5-7+ years of progressive IT infrastructure, IAM, or security engineering experience, including at least 3 years in a leadership or senior engineering capacity. Proven expertise with Microsoft Active Directory and Microsoft Entra ID (Azure AD), including user lifecycle management, conditional access, and on-prem integration.
Experience with cloud IAM platforms: AWS IAM (roles, policies, service accounts, resource-level controls). Google Cloud IAM / Cloud Identity (policy-based access, service account management, federated identity). Familiarity with enterprise SSO/federation platforms such as Okta or Ping Identity, covering MFA, SSO, SaaS app integration, and user provisioning. Hands-on experience with open-source/on-prem IAM platforms such as: Keycloak (SSO, OAuth2, OIDC, federation, LDAP/AD integration). OpenLDAP or FreeIPA (users, groups, schema extensions, Kerberos integration). Experience with other platforms such as Gluu, FusionAuth, or Apache Syncope is a plus. Strong knowledge of authentication and access control standards (SAML, OAuth2, OIDC, PKI). Proven ability to design and enforce RBAC/ABAC policies, just-in-time (JIT) access, and least privilege across hybrid environments. Demonstrated success implementing and managing MFA, SSO, and conditional access across diverse systems. U.S. Citizenship required (clearance eligibility).
Preferred: Experience with FedRAMP, NIST 800-53, DISA STIGs, ISO 27001, HIPAA, SOX compliance frameworks. Knowledge of Zero Trust architecture and security best practices. Familiarity with Google Workspace IAM and federation with SaaS/enterprise apps. Scripting/automation skills (PowerShell, Python, or similar). Relevant certifications such as CISSP, CCSP, AWS Security Specialty, or IAM-specific certifications.
KEY RESPONSIBILITIES
Directory & Identity Management Oversee Active Directory and Entra ID (Azure AD) provisioning, access controls, group policies, and lifecycle management. Manage AWS IAM roles, service accounts, and resource-level access controls. Administer Google Cloud IAM/Cloud Identity policies, federated access, and service accounts. Configure and manage SSO and federation solutions (Okta, Ping, Keycloak, etc.). Enforce RBAC/ABAC access policies, least privilege, MFA, and conditional access controls. Implement and drive adoption of Zero Trust principles across IAM and directory solutions.
Messaging & Collaboration Platforms Manage Microsoft Exchange, Office 365, and Teams, ensuring performance, security, and availability. Enforce email security standards (SPF, DKIM, DMARC), retention, and encryption policies. Lead migration and modernization of messaging and collaboration platforms. Cloud & Infrastructure Integration Drive hybrid and cloud-based migrations (Azure, M365/O365, AWS IAM, Google IAM). Ensure scalability, high availability, and disaster recovery readiness. Automate IAM/directory processes using scripting (PowerShell, Python, etc.).
Compliance & Governance Align IAM and messaging systems with FedRAMP, NIST, DISA STIGs, ISO 27001, HIPAA, SOX. Establish and maintain audit-ready documentation and access governance processes. Monitor, report, and remediate IAM-related metrics, risks, and compliance adherence.
Leadership & Collaboration Supervise technical staff and serve as an escalation point for complex IAM/directory issues. Partner with IT, security, and vendors to deliver secure, enterprise-wide IAM solutions. Provide technical leadership, updates, and recommendations to senior management. Provide updates, recommendations, and technical leadership to senior management.
$117,000 - $129,000 a year
A salary commensurate with experience will be offered.
SteerBridge Strategies is proud to be an Equal Opportunity Employer.
We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity-regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law.
We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial-grade capabilities that accelerate operational effectiveness and drive measurable mission success.
At the core of SteerBridge is our people-especially the veterans whose leadership, problem-solving mindset, and commitment to excellence elevate every project we support. We don't simply hire exceptional talent;
we cultivate it , creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve.
We are seeking an experienced Enterprise Directory & Messaging (EDM) Lead to design, implement, and oversee enterprise-wide directory services, identity, and access management (IAM) strategies. This role is responsible for establishing secure authentication and authorization frameworks, managing enterprise messaging platforms, and ensuring compliance with regulatory standards.
The ideal candidate will bring hands-on expertise with modern IAM and directory service platforms (cloud, on-prem, and open source) and will be able to design, manage, and enforce access control models across a hybrid enterprise environment. As a senior technical leader, the EDM Lead will collaborate across IT, security, and business teams to modernize IAM capabilities and messaging services while driving adoption of Zero Trust and least privilege principles.
Benefits Health insurance Dental insurance Vision insurance Life Insurance 401(k) Retirement Plan with matching Paid Time Off Paid Federal Holidays Required Skills and Qualifications
5-7+ years of progressive IT infrastructure, IAM, or security engineering experience, including at least 3 years in a leadership or senior engineering capacity. Proven expertise with Microsoft Active Directory and Microsoft Entra ID (Azure AD), including user lifecycle management, conditional access, and on-prem integration.
Experience with cloud IAM platforms: AWS IAM (roles, policies, service accounts, resource-level controls). Google Cloud IAM / Cloud Identity (policy-based access, service account management, federated identity). Familiarity with enterprise SSO/federation platforms such as Okta or Ping Identity, covering MFA, SSO, SaaS app integration, and user provisioning. Hands-on experience with open-source/on-prem IAM platforms such as: Keycloak (SSO, OAuth2, OIDC, federation, LDAP/AD integration). OpenLDAP or FreeIPA (users, groups, schema extensions, Kerberos integration). Experience with other platforms such as Gluu, FusionAuth, or Apache Syncope is a plus. Strong knowledge of authentication and access control standards (SAML, OAuth2, OIDC, PKI). Proven ability to design and enforce RBAC/ABAC policies, just-in-time (JIT) access, and least privilege across hybrid environments. Demonstrated success implementing and managing MFA, SSO, and conditional access across diverse systems. U.S. Citizenship required (clearance eligibility).
Preferred: Experience with FedRAMP, NIST 800-53, DISA STIGs, ISO 27001, HIPAA, SOX compliance frameworks. Knowledge of Zero Trust architecture and security best practices. Familiarity with Google Workspace IAM and federation with SaaS/enterprise apps. Scripting/automation skills (PowerShell, Python, or similar). Relevant certifications such as CISSP, CCSP, AWS Security Specialty, or IAM-specific certifications.
KEY RESPONSIBILITIES
Directory & Identity Management Oversee Active Directory and Entra ID (Azure AD) provisioning, access controls, group policies, and lifecycle management. Manage AWS IAM roles, service accounts, and resource-level access controls. Administer Google Cloud IAM/Cloud Identity policies, federated access, and service accounts. Configure and manage SSO and federation solutions (Okta, Ping, Keycloak, etc.). Enforce RBAC/ABAC access policies, least privilege, MFA, and conditional access controls. Implement and drive adoption of Zero Trust principles across IAM and directory solutions.
Messaging & Collaboration Platforms Manage Microsoft Exchange, Office 365, and Teams, ensuring performance, security, and availability. Enforce email security standards (SPF, DKIM, DMARC), retention, and encryption policies. Lead migration and modernization of messaging and collaboration platforms. Cloud & Infrastructure Integration Drive hybrid and cloud-based migrations (Azure, M365/O365, AWS IAM, Google IAM). Ensure scalability, high availability, and disaster recovery readiness. Automate IAM/directory processes using scripting (PowerShell, Python, etc.).
Compliance & Governance Align IAM and messaging systems with FedRAMP, NIST, DISA STIGs, ISO 27001, HIPAA, SOX. Establish and maintain audit-ready documentation and access governance processes. Monitor, report, and remediate IAM-related metrics, risks, and compliance adherence.
Leadership & Collaboration Supervise technical staff and serve as an escalation point for complex IAM/directory issues. Partner with IT, security, and vendors to deliver secure, enterprise-wide IAM solutions. Provide technical leadership, updates, and recommendations to senior management. Provide updates, recommendations, and technical leadership to senior management.
$117,000 - $129,000 a year
A salary commensurate with experience will be offered.
SteerBridge Strategies is proud to be an Equal Opportunity Employer.
We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity-regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law.
We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.