Identity Management Engineer / Architect (R-00197)

True Zero Technologies LLC.; United States; Remote; USD 130,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Best medical coverage

100% of medical premiums covered

Company incentives

Training and certifications

PTO 3 weeks + 11 holidays

401k match

Cell phone/home internet reimbursement

Parental leave

Technical skills training

Job summary

True Zero Technologies LLC. seeks an Identity Management Engineer/Architect to design, implement, and operate a secure IAM/ICAM platform spanning on‑premises, cloud, SaaS, and hybrid environments.

You will automate provisioning, manage federation (SAML/OIDC/OAuth/SCIM), and enforce least-privilege access across enterprise systems, including PAM, IGA, and AWS IAM Identity Center.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, Information Systems or related technical discipline.
• Demonstrated experience designing, engineering, or administering enterprise IAM/ICAM solutions.
• Strong experience with Active Directory and cloud-based directory services such as Microsoft Entra ID.
• Hands-on experience with identity federation and provisioning standards including SAML, OIDC, OAuth, and SCIM.
• Experience implementing or operating Privileged Access Management platforms and privileged identity workflows.
• Experience with Identity Governance and Administration, preferably SailPoint IdentityIQ or SailPoint Identity Security Cloud.
• Experience with AWS IAM, AWS IAM Identity Center, and cloud identity integration.
• Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management.
• Experience implementing PIV/CAC, certificate-based authentication, and phishing-resistant MFA.
• FICAM and federal identity standards familiarity; Zero Trust architecture emphasis on identity-based policy enforcement.
• Experience automating identity workflows using APIs, scripting languages, PowerShell, Python, Terraform, or similar technologies.
• Experience integrating identity platforms with SaaS, cloud services, and hybrid infrastructures.
• Experience with centralized logging, identity monitoring, audit reporting, access reviews, and compliance evidence.

Responsibilities

• Design, implement, and operate enterprise IAM/ICAM architectures across on‑premises, cloud, SaaS, and hybrid environments.
• Engineer and maintain directory services, including AD and Microsoft Entra ID.
• Automate provisioning, deprovisioning, role assignment, access changes, and lifecycle management.
• Integrate applications using SAML, OIDC, OAuth, and SCIM.
• Implement and maintain PAM controls for admin accounts.
• Design and operate IGA capabilities using SailPoint or approved platforms.
• Integrate AWS IAM Identity Center and related AWS IAM capabilities.
• Implement PIV/CAC and strong authentication methods.
• Enforce phishing-resistant MFA and least-privilege access controls.
• Align identity architectures with FICAM and government identity standards.
• Automate identity workflows using APIs, scripting, IaC, and automation tools.
• Collaborate with cross-functional teams to onboard apps and services securely.
• Perform access reviews, entitlement analysis, and governance activities.

Skills

Active Directory

Microsoft Entra ID

SAML

OIDC

OAuth

SCIM

PAM

Zero Trust

Terraform

PowerShell

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems

Tools

AWS IAM Identity Center

SailPoint IdentityIQ

SailPoint Identity Security Cloud

AWS IAM

PowerShell

Python

Job description

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM-$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025 , a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

The Identity Management Engineer / Architect designs, implements, and operates a secure, scalable enterprise identity platform spanning on-premises, cloud, SaaS, and hybrid environments. The role is responsible for automated identity provisioning and deprovisioning, strong authentication, least-privilege access, modern application federation, privileged account management, and continuous identity governance, monitoring, and auditing.

This position is foundational to the Zero Trust identity pillar and ensures that users, administrators, applications, and workloads receive appropriate access based on verified identity, policy, risk, and mission requirements. The engineer/architect will support government and regulated environments through PIV/CAC smart-card authentication, phishing-resistant MFA, FICAM-aligned identity practices, privileged-access controls, and secure integration across enterprise identity platforms.

Job Responsibilities

• Design, implement, and operate enterpriseIAM / ICAM architecturessupporting on-premises, cloud, SaaS, and hybrid environments.
• Engineer and maintaindirectory services, including Active Directory and Microsoft Entra ID where included in the approved architecture.
• Design and automateuser provisioning, deprovisioning, role assignment, access changes, and identity lifecycle managementprocesses.
• Integrate enterprise applications using modern identity and federation standards includingSAML, OpenID Connect (OIDC), OAuth, and SCIM.
• Implement and maintainPrivileged Access Management (PAM)controls for administrative, elevated, and high-risk accounts.
• Design and operateIdentity Governance and Administration (IGA)capabilities using SailPoint or approved enterprise identity-governance platforms.
• Integrate and administerAWS IAM Identity Centerand related AWS identity and access-management capabilities.
• ImplementPIV/CAC smart-card authentication, certificate-based authentication, and other approved strong-authentication mechanisms.
• Enforcephishing-resistant multi-factor authenticationfor privileged and mission-critical access.
• Align identity architectures, authentication methods, credential lifecycle processes, and access controls withFICAMrequirements and applicable government identity standards.
• Develop and enforceleast-privilege, role-based, and policy-based access controlsacross enterprise systems and applications.
• Automate identity-management processes using scripting, APIs, infrastructure-as-code, and workflow technologies.
• Integrate PAM, IGA, directory, cloud identity, and authentication platforms to provide consistent identity controls across environments.
• Implement monitoring, logging, auditing, and alerting for authentication events, privileged activity, identity lifecycle changes, and access-policy violations.
• Perform periodic access reviews, entitlement analysis, privileged-account reviews, and identity-governance activities.
• Partner with application, cloud, cybersecurity, platform, and DevSecOps teams to securely onboard applications and services into enterprise identity platforms.
• Troubleshoot complex authentication, federation, provisioning, directory synchronization, authorization, and access-management issues.
• Maintain identity architecture documentation, integration standards, operational procedures, access-control models, and governance processes.

Job Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
• Demonstrated experience designing, engineering, or administering enterpriseIAM / ICAM solutions.
• Strong experience withActive Directory and cloud-based directory services such as Microsoft Entra ID.
• Hands‑on experience with identity federation and provisioning standards includingSAML, OIDC, OAuth, and SCIM.
• Experience implementing or operatingPrivileged Access Managementplatforms and privileged identity workflows.
• Experience withIdentity Governance and Administration, preferably usingSailPoint IdentityIQ or SailPoint Identity Security Cloud.
• Experience withAWS IAM, AWS IAM Identity Center, and cloud identity integration.
• Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management.
• Experience implementingPIV/CAC, certificate-based authentication, and phishing-resistant MFA.
• Familiarity withFICAM, federal identity standards, and authentication requirements for government environments.
• Strong understanding ofZero Trust architecture, with particular emphasis on identity as a primary policy‑enforcement and access‑control pillar.
• Experience automating identity workflows using APIs, scripting languages, PowerShell, Python, Terraform, or comparable automation technologies.
• Experience integrating identity platforms with SaaS applications, cloud services, enterprise applications, and hybrid infrastructure.
• Experience with centralized logging, identity monitoring, audit reporting, access reviews, and compliance evidence collection.
• Experience supporting government, defense, GovCloud, or other regulated environments is preferred.
• Strong architecture, troubleshooting, documentation, governance, and cross-functional collaboration skills.

Preferred Certifications

• AWS Certified Security – Specialty
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Certified Information Systems Security Professional (CISSP)
• SailPoint IdentityIQ / Identity Security Cloud certification
• CyberArk Defender or CyberArk Sentry

We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you’ll enjoy:

• Competitive salary, paid twice per month

• Best in class medical coverage

• 100% of medical premiums covered by True Zero

• Company wide new business incentive programs

• Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)

• 3 weeks of PTO starting + 11 Paid Holidays Annually

• 401k Program with 100% company match on the first 4%

• Monthly reimbursement of Cell Phone and Home Internet costs

• Paternity/Maternity Leave

• Investment in training and certifications to broaden and deepen your technical skills