Identity & Access Architect — Zero Trust IAM

Socket.dev; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Best medical coverage

Premium medical premiums covered by us

401k company match

PTO + holidays

Training and certifications

Job summary

True Zero Technologies is seeking an Identity Management Engineer/Architect to design, implement, and operate a secure, scalable identity platform across on-premises, cloud, SaaS, and hybrid environments. The role emphasizes automated provisioning, strong authentication, least-privilege access, and identity governance aligned with government standards.

The engineer will support regulated environments with PIV/CAC, phishing-resistant MFA, and integration across enterprise identity platforms,

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
• Demonstrated experience designing, engineering, or administering enterpriseIAM/ICAM solutions.
• Strong experience withActive Directory and cloud-based directory services such as Microsoft Entra ID.
• Hands-on experience with identity federation and provisioning standards including SAML, OIDC, OAuth, and SCIM.
• Experience implementing or operating Privileged Access Management platforms and privileged identity workflows.
• Experience withIdentity Governance and Administration, preferably using SailPoint IdentityIQ or SailPoint Identity Security Cloud.
• Experience withAWS IAM, AWS IAM Identity Center, and cloud identity integration.
• Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management.
• Experience implementing PIV/CAC, certificate-based authentication, and phishing-resistant MFA.
• Familiarity with FICAM, federal identity standards, and authentication requirements for government environments.
• Strong architecture, troubleshooting, documentation, governance, and cross-functional collaboration skills.

Responsibilities

• Design, implement, and operate enterpriseIAM / ICAM architectures supporting on-premises, cloud, SaaS, and hybrid environments.
• Engineer and maintain directory services, including Active Directory and Entra ID.
• Design and automate user provisioning, deprovisioning, role assignment, and identity lifecycle management processes.
• Integrate applications using SAML, OIDC, OAuth, and SCIM.
• Implement and maintain PAM controls for privileged accounts.
• Design and operate IGA capabilities using SailPoint or approved platforms.
• Integrate AWS IAM Identity Center and related AWS identity features.
• Implement PIV/CAC authentication and phishing-resistant MFA.
• Enforce least-privilege and policy-based access controls across systems.
• Automate identity workflows using APIs, scripting, Terraform, and IaC.
• Collaborate with teams to onboard applications into identity platforms.
• Troubleshoot authentication, federation, provisioning, and access-management issues.
• Maintain identity architecture documentation and governance processes.

Skills

IAM/ICAM design

Active Directory

Federation standards

PAM controls

Zero Trust

Automation scripting

Governance & Compliance

Cross-functional collaboration

Education

Bachelor’s degree in Cybersecurity / CS / IT / IS

Tools

SailPoint IdentityIQ

SailPoint Identity Security Cloud

AWS IAM Identity Center

Job description

True Zero Technologies is seeking an Identity Management Engineer/Architect to design, implement, and operate a secure, scalable identity platform across on-premises, cloud, SaaS, and hybrid environments. The role emphasizes automated provisioning, strong authentication, least-privilege access, and identity governance aligned with government standards.

The engineer will support regulated environments with PIV/CAC, phishing-resistant MFA, and integration across enterprise identity platforms,