Remote IAM Architect: Enterprise Identity & MPI Lead

GovCIO; Denver (CO); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

Employee Assistance Program (EAP)

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is seeking an IAM Architect specializing in identity resolution and person matching to design enterprise capabilities that create a single golden identity across mission systems. You will own the Master Person Index architecture and lead deterministic/probabilistic matching, while integrating SSO and Zero Trust principles.

The role requires deep IAM engineering experience, familiarity with federated protocols (SAML, OAuth 2.0, OIDC, SCIM) and data governance collaboration.

Qualifications

• Experience in enterprise IAM engineering/architecture.
• Strong knowledge of identity resolution / person matching.
• Familiarity with federated identity protocols (SAML, OAuth 2.0, OIDC, SCIM, AD/LDAP).
• Knowledge of Zero Trust concepts and ICAM programs.

Responsibilities

• Design and lead enterprise identity resolution and person-matching capabilities.
• Develop MPI/Enterprise Identity Index architecture with match/merge rules.
• Define lifecycle management for identity provisioning/de-provisioning and privileged access.
• Lead integration of SSO technologies and federation across systems.
• Collaborate with data governance to set data-quality standards and auditability.
• Provide architectural oversight and code reviews for IAM automation scripts.

Job description

GovCIO is seeking an IAM Architect specializing in identity resolution and person matching to design enterprise capabilities that create a single golden identity across mission systems. You will own the Master Person Index architecture and lead deterministic/probabilistic matching, while integrating SSO and Zero Trust principles.

The role requires deep IAM engineering experience, familiarity with federated protocols (SAML, OAuth 2.0, OIDC, SCIM) and data governance collaboration.