Remote IAM Architect: Identity Resolution Leader

GovCIO

Salem (OR)

Remote

USD 155,000 - 175,000

Full time

4 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

EAP

Corporate Discounts

Learning platform

Certification assistance

Referral bonus

Internal mobility

Pet Insurance

Flexible work environment

Job summary

GovCIO is seeking an IAM Architect specializing in Identity Resolution and Person Matching to design and lead enterprise capabilities that create a single, trusted identity for individuals across mission systems.

The role focuses on matching, deduplicating, and linking person records, combining ICAM engineering with deterministic and probabilistic identity‑matching to reduce duplicates and improve data quality across the enterprise.

Qualifications

Bachelor's degree in Computer Science, Information Systems, or a related field and 15 years of experience engineering/architecture
12+ years of experience in identity and access management engineering/architecture
8+ years in Cybersecurity with at least 5 years dedicated to IAM Architecture in large-scale environments
Hands-on experience designing and implementing person identity matching/identity resolution at enterprise scale
Deep understanding of federated identity protocols (SAML, OAuth 2.0, OIDC, SCIM, AD/LDAP)
Knowledge of NIST SP 800-63/800-207 (Zero Trust) and related security frameworks
Certifications such as CISSP, Security+ CE, CASP+ or vendor-specific IAM certifications

Responsibilities

Architect and lead enterprise identity resolution and person matching capabilities across data stores
Design deterministic and probabilistic record linkage strategies including fuzzy matching and attribute scoring
Own the Master Person Index architecture including match/merge rules and survivorship logic
Architect identity lifecycle management and privileged access controls with the ICAM program
Design and implement Zero Trust identity principles across enterprise boundaries
Lead federated identity, directory services, authentication, and SSO architecture (SAML, OAuth 2.0, OIDC, SCIM, AD/LDAP)
Collaborate with data governance to define data-quality standards and audit requirements
Develop architecture diagrams, data flows, matching logic documentation, and compliance artifacts
Act as technical escalation point and mentor IAM Engineers, reviewing automation scripts
Work with cross-functional teams to define requirements and deliver solutions
Perform root-cause analysis of identity-matching errors and drive improvements