Remote IAM Architect - Identity Resolution & MPI Lead

GovCIO; Jackson (MS); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

EAP Program

Corporate Discounts

Learning & Development platform

Certification Assistance

Referral Bonus

Internal Mobility

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is hiring an IAM Architect to design and lead enterprise identity resolution and person matching across mission systems, establishing a golden record. You will own MPI architecture, survivorship, and matching rules, combining ICAM engineering with ML-assisted techniques.

This fully remote role requires strong governance and collaboration with stakeholders. The ideal candidate has extensive IAM/ICAM experience, familiarity with SAML/OIDC/OAuth, and NIST guidelines, with leadership skills

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related field; 12+ years in IAM architecture/engineering.
• 12+ years in identity and access management engineering/architecture.
• 8+ years in cybersecurity with at least 5 years in IAM architecture in large environments.
• Hands-on experience designing and implementing identity matching/ resolution at enterprise scale.
• Deep understanding of federated identity protocols: SAML, OAuth 2.0, OIDC, SCIM, and AD/LDAP.
• Knowledge of NIST SP 800-63 and 800-207 (Zero Trust).
• Certifications such as CISSP, Security+ CE, CASP+ or vendor certs.

Responsibilities

• Architect and lead enterprise identity resolution and matching to create a golden record across systems.
• Design deterministic and probabilistic record-linkage strategies for accuracy.
• Own MPI/Enterprise Identity Index lifecycle—rules, survivorship, tuning.
• Architect identity lifecycle management and privileged access controls with ICAM.
• Design Zero Trust principles across networks and apps.
• Lead federation, directory services, authentication, and SSO (SAML, OAuth 2.0, OIDC, SCIM).
• Collaborate with data governance to define data-quality standards and auditability.
• Create architecture diagrams, data flows, and compliance artifacts; brief stakeholders.
• Mentor IAM engineers and provide architectural oversight of automation scripts.
• Collaborate with cross-functional teams to deliver innovative IAM solutions.
• Root-cause analysis of identity-matching errors and continuous improvement.

Skills

IAM Architecture

Identity Resolution

Federated Identity Protocols (SAML, O5

MPI / Master Person Index

Zero Trust

NIST 800-63/800-207

IAM Tools (SailPoint, Okta, Entra ID,/

Leadership & Mentoring

Education

Bachelor's degree in Computer Science / Information Systems

Master's degree (preferred)

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Active Directory/LDAP

Job description

GovCIO is hiring an IAM Architect to design and lead enterprise identity resolution and person matching across mission systems, establishing a golden record. You will own MPI architecture, survivorship, and matching rules, combining ICAM engineering with ML-assisted techniques.

This fully remote role requires strong governance and collaboration with stakeholders. The ideal candidate has extensive IAM/ICAM experience, familiarity with SAML/OIDC/OAuth, and NIST guidelines, with leadership skills