IAM Architect (Remote)

GovCIO; Santa Fe (NM); Remoto; USD 155.000 - 175.000; Tempo pieno

Vantaggi offerti da questo lavoro

Employee Assistance Program

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Descrizione del lavoro

GovCIO is seeking an IAM Architect specializing in Identity Resolution and Person Matching to design enterprise capabilities that create a single trusted identity across mission and business systems for the Department of Veterans Affairs. You will own the Master Person Index and manage deterministic and probabilistic matching, survivorship rules, and data governance alignment.

The role combines ICAM engineering with modern identity protocols (SAML, OAuth 2.0, OIDC, SCIM) and Zero Trust

Competenze

• Bachelor’s degree and 15+ years in engineering/architecture.
• 12+ years IAM engineering/architecture experience.
• 8+ years in cybersecurity with 5+ years IAM architecture at scale.
• Hands‑on identity matching/resolution across enterprise data.

Mansioni

• Architect and lead enterprise identity resolution capabilities across data stores.
• Design deterministic and probabilistic record‑linkage strategies for accurate identity resolution.
• Own MPI/Enterprise Identity Index architecture, rules, and survivorship logic.
• Design identity lifecycle management and privileged access workflows.
• Apply Zero Trust principles across network and app boundaries.
• Lead federated identity, directory services, authentication, and SSO (SAML, OAuth 2.0, OIDC, SCIM, AD/LDAP).
• Collaborate with data governance to define data quality standards and auditability.
• Create architecture diagrams, data flows, and documentation; brief leadership.
• Mentor IAM engineers and review automation code.
• Work with cross‑functional teams to troubleshoot and deliver solutions.

Conoscenze

IAM architecture

Identity resolution

Deterministic/probabilistic matching

Federated identity protocols

Zero Trust

SAML/OAuth/OIDC/SCIM

Active Directory/LDAP

Threat modeling / data governance

Formazione

Bachelor's degree in Computer Science or related field

Master's degree in a related field

Strumenti

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Descrizione del lavoro

United States

Suitability/Public Trust

Fully remote

Information Technology

Overview

GovCIO is currently hiring an IAM Architect specializing in Identity Resolution and Person Matching to design and lead enterprise capabilities that establish a single, trusted, authoritative identity for every individual across mission and business systems at the Department of Veterans Affairs. This role owns the architecture for matching, deduplicating, and linking person records — combining traditional Identity, Credential, and Access Management (ICAM) engineering with deterministic and probabilistic identity‑matching disciplines to reduce duplicate identities, prevent identity fraud, and improve data quality across the enterprise. This is a fully remote position located within the United States.

Please note:

The contract has not been awarded; this position remains unfunded and is contingent upon the award of the contract.

Responsibilities

• Architect and lead enterprise identity resolution and person‑matching capabilities that establish and maintain a single authoritative, deduplicated identity record (a “golden record”) across mission, HR, credentialing, and mission‑partner data stores.
• Design deterministic and probabilistic record‑linkage strategies — including fuzzy matching, weighted attribute scoring, and machine‑learning‑assisted matching — to accurately resolve person identities across disparate and inconsistently formatted data sources.
• Own the architecture, integration, and lifecycle management of a Master Person Index (MPI) / Enterprise Identity Index, including match/merge rules, survivorship logic, and false‑positive/false‑negative tuning.
• Architect identity lifecycle management, user provisioning/de‑provisioning workflows, and privileged access controls in coordination with the broader ICAM program.
• Design and implement Zero Trust identity principles across enterprise network and application boundaries.
• Lead federated identity, directory services, authentication, and SSO architecture (SAML, OAuth 2.0, OIDC, SCIM, Active Directory/LDAP).
• Partner with data governance, privacy, and mission stakeholders to define data‑quality standards, matching thresholds, and audit/traceability requirements for identity data.
• Develop technical architecture diagrams, data flows, matching‑logic documentation, and compliance artifacts; brief findings and recommendations to government technical leads and stakeholders.
• Act as a technical escalation point and mentor for IAM Engineers, providing architectural oversight and code reviews for automation scripts.
• Collaboratewith cross‑functional teams to define requirements, troubleshoot issues, and deliver innovative solutions aligned with organizationalobjectives.
• Conduct root‑cause analysis of identity‑matching errors (duplicate identities, mismatches, orphaned records) and drive continuous improvement of matching algorithms and data pipelines.

Qualifications

Required Skills & Experience

• Bachelor's degree in Computer Science, Information Systems, or a related field, and15 years of experience engineering/architecture (or commensurate combination of education and experience).
• 12+ years of experience in identity and access management engineering/architecture.
• 8+ years in Cybersecurity with at least 5 years dedicated to IAM Architecture in large‑scale environments.
• Demonstrated, hands‑on experience designing and implementing person identity matching / identity resolution capabilities at enterprise scale, including deterministic and probabilistic record linkage.
• Deep technical understanding of federated identity protocols, including SAML, OAuth 2.0, OIDC, SCIM, and Active Directory/LDAP architecture.
• Working knowledge of NIST SP 800-63 (Digital Identity Guidelines: 800-63A/B/C) and NIST SP 800-207 (Zero Trust Architecture).
• One or more certifications: CISSP, Security+ CE, CASP+, or vendor‑specific identity certifications.

Clearance Required:

Must be able to obtain and maintain a suitability/public trust clearance.

Preferred Skills & Experience

• Experience with entity‑resolution or Master Person Index (MPI).
• Direct experience with enterprise IAM tools such as SailPoint, Okta, Microsoft Entra ID, Ping Identity, or DigiCert.
• Experience supporting a federal identity‑management or person‑matching program (e.g., DHS, USCIS, VA, SSA, or similar agency).
• Knowledge of data governance frameworks and their integration with identity/ICAM solutions to enforce data‑level access controls.
• Advanced knowledge of RESTful API authorization protocols and secure data‑exchange gateways.
• Master's degree in a related technical field.

Posted Salary Range

USD $155,000.00 - USD $175,000.00 /Yr.

Company Overview

GovCIO is a team of transformers--people who are passionate about transforming government IT. Every day, we make a positive impact by delivering innovative IT services and solutions that improve how government agencies operate and serve our citizens.

But we can't do it alone. We need great people to help us do great things - for our customers, our culture, and our ability to attract other great people. We are changing the face of government IT and building a workforce that fuels this mission. Are you ready to be a transformer?

What You Can Expect

Interview & Hiring Process

If you are selected to move forward through the process, here’s what you can expect:

• During the Interview Process
• Virtual video interview conducted via video with the hiring manager and/or team
• Camera must be on
• A valid photo ID must be presented during each interview
• During the Hiring Process
• Enhanced Biometrics ID verification screening
• Background check, to include:
• Criminal history (past 7 years)
• Verification of your highest level of education
• Verification of your employment history (past 7 years), based on information provided in your application

Employee Perks

At GovCIO, we consistently hear that meaningful work and a collaborative team environment are two of the top reasons our employees enjoy working here. In addition, our employees have access to a range of perks and benefits to support their personal and professional well‑being, beyond the standard company offered health benefits, including:

• Employee Assistance Program (EAP)
• Corporate Discounts
• Learning & Development platform, to include certification preparation content
• Training, Education and Certification Assistance*
• Referral Bonus Program
• Internal Mobility Program
• Pet Insurance
• Flexible Work Environment

*Available to full‑time employees

Our employees’ unique talents and contributions are the driving force behind our success in supporting our customers, which ultimately fuels the success of our company. Join us and be a part of a culture that invests in its people and prioritizes continuous enhancement of the employee experience.

We are an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, disability, or status as a protected veteran. EOE, including disability/vets.

Posted Pay Range

The posted pay range, if referenced, reflects the range expected for this position at the commencement of employment, however, base pay offered may vary depending on multiple individualized factors, including market location, job‑related knowledge, skills, education, experience, and internal equity. The total compensation package for this position may also include other compensation elements, to be discussed during the hiring process. If hired, employee will be in an “at‑will position” and the GovCIO reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, GovCIO or individual department/team performance, and market factors.