Remote IAM Architect - Identity Resolution & Golden Record

GovCIO; Helena (MT); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

Employee Assistance Program (EAP)

Corporate Discounts

Learning & Development platform

Certification assistance

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is seeking an IAM Architect specializing in Identity Resolution and Person Matching to design and lead enterprise capabilities for a single, trusted identity across mission systems. The role focuses on mastering MPI, identity matching, and data governance within a fully remote US-based position.

Responsibilities include designing both deterministic and probabilistic matching, managing lifecycle and provisioning workflows, and guiding privacy and data quality standards across stakeholders.

Qualifications

• Bachelor's degree in CS, IS, or related field with 15 years of architecture/engineering experience.
• 12+ years in identity and access management engineering/architecture.
• 8+ years in Cybersecurity with at least 5 years IAM Architecture in large-scale environments.
• Hands-on experience designing person identity matching/identity resolution at enterprise scale.
• Knowledge of federated identity protocols: SAML, OAuth 2.0, OIDC, SCIM, and AD/LDAP.
• Familiarity with NIST SP 800-63 and NIST SP 800-207 Zero Trust Architecture.
• Certifications: CISSP, Security+ CE, CASP+, or vendor-specific identity certifications.

Responsibilities

• Architect and lead enterprise identity resolution and person-matching capabilities across data stores.
• Design deterministic and probabilistic record-linkage strategies for accurate identity resolution.
• Own Master Person Index architecture, match/merge rules, survivorship, and tuning.
• Architect identity lifecycle management and privileged access controls with ICAM program.
• Design and implement Zero Trust principles across network and app boundaries.
• Lead federated identity, directory services, authentication, and SSO architecture (SAML, OAuth 2.0, OIDC, SCIM, LDAP).
• Collaborate with data governance to define data-quality standards and audit requirements.
• Produce architecture diagrams, data flows, matching logic docs and compliance artifacts.

Skills

IAM Architecture

Identity Resolution

Federated Identity

Zero Trust

NIST Guidelines

Security Certifications

Education

Bachelor's degree in CS/IS or related field

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Job description

GovCIO is seeking an IAM Architect specializing in Identity Resolution and Person Matching to design and lead enterprise capabilities for a single, trusted identity across mission systems. The role focuses on mastering MPI, identity matching, and data governance within a fully remote US-based position.

Responsibilities include designing both deterministic and probabilistic matching, managing lifecycle and provisioning workflows, and guiding privacy and data quality standards across stakeholders.