Remote IAM Architect - Identity Resolution & MPI Lead

GovCIO; Richmond (VA); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

Employee Assistance Program

Corporate Discounts

Learning & Development platform

Certification Assistance

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is seeking an IAM Architect to lead enterprise identity resolution and person-matching, building a single authoritative identity across mission systems while aligning with ICAM and zero-trust principles.

The role demands hands-on expertise in federated identities, record-linkage (deterministic and probabilistic), and enterprise data governance, with remote US-only work. Strong collaboration with stakeholders is essential.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or related field with extensive engineering/architecture experience.
• 12+ years identity and access management engineering/architecture.
• 8+ years in cybersecurity with 5+ years IAM in large-scale environments.
• Hands-on identity matching/identity resolution at enterprise scale.
• Deep knowledge of federated identity protocols (SAML, OAuth 2.0, OIDC, SCIM, LDAP).
• Familiarity with NIST Digital Identity Guidelines and Zero Trust concepts.

Responsibilities

• Architect and lead enterprise identity resolution and person-matching capabilities to create a golden identity record across data stores.
• Design deterministic and probabilistic record-linkage strategies for accurate identity resolution across data sources.
• Own MPI/Enterprise Identity Index architecture including match/merge rules and survivorship logic.
• Architect identity lifecycle management and privileged access controls with the ICAM program.
• Implement Zero Trust identity principles across networks and applications.
• Lead federated identity, directory services, authentication, and SSO architecture (SAML, OAuth, OIDC, SCIM).
• Draft data quality standards, matching thresholds, and audit requirements with stakeholders.
• Create architecture diagrams, data flows, matching logic docs, and compliance artifacts for government leads.
• Mentor IAM engineers and provide architectural oversight and code reviews.
• Collaborate with cross-functional teams to define requirements and deliver solutions.
• Analyze identity-matching errors to improve algorithms and data pipelines.

Skills

IAM Architecture

Identity Resolution

Federated Identity

Zero Trust

SAML/OAuth/OIDC

Education

Bachelor's degree in CS/IS

Master's degree (preferred)

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Job description

GovCIO is seeking an IAM Architect to lead enterprise identity resolution and person-matching, building a single authoritative identity across mission systems while aligning with ICAM and zero-trust principles.

The role demands hands-on expertise in federated identities, record-linkage (deterministic and probabilistic), and enterprise data governance, with remote US-only work. Strong collaboration with stakeholders is essential.