Remote IAM Architect - Identity Resolution & MPI Leader

GovCIO; Frankfort (KY); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

Employee Assistance Program

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is seeking an IAM Architect focused on identity resolution and person matching to design enterprise capabilities that create a single authoritative identity across DoD mission systems. This remote role leads MPI governance, deterministic/probabilistic linking, and Zero Trust IAM architecture, coordinating with data governance and security teams.

You will guide SAML, OAuth 2.0, OIDC, SCIM implementations and mentor IAM Engineers, delivering scalable identity solutions for secure, compliant

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or related field; 12+ years IAM architecture/engineering.
• 12+ years in identity and access management engineering/architecture.
• 8+ years in cybersecurity with at least 5 years IAM architecture in large-scale environments.
• Hands-on experience with enterprise identity matching/resolution, including deterministic and probabilistic linking.
• Knowledge of SAML, OAuth 2.0, OIDC, SCIM, and AD/LDAP architecture.
• Familiarity with NIST SP 800-63/800-207 and Zero Trust Architecture.
• Certifications: CISSP, Security+ CE, CASP+, or vendor-specific identity certifications.

Responsibilities

• Architect and lead enterprise identity resolution and MPI across data stores.
• Design deterministic and probabilistic record-linkage strategies.
• Own Master Person Index architecture, rules and survivorship.
• Define identity lifecycle management and privileged access controls.
• Apply Zero Trust principles across networks and apps.
• Lead federated identity, directory services, authentication and SSO architecture.
• Collaborate with data governance and privacy stakeholders on data-quality standards.
• Develop architecture diagrams, data flows, and compliance artifacts.
• Mentor IAM Engineers and review automation scripts.
• Drive continuous improvement of matching algorithms and pipelines.

Skills

IAM architecture

Identity resolution

Federated identity

SAML/OAuth/OIDC

Zero Trust

Leadership

Mentoring

Education

Bachelor's degree in CS/IS

Master's degree (preferred)

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Job description

GovCIO is seeking an IAM Architect focused on identity resolution and person matching to design enterprise capabilities that create a single authoritative identity across DoD mission systems. This remote role leads MPI governance, deterministic/probabilistic linking, and Zero Trust IAM architecture, coordinating with data governance and security teams.

You will guide SAML, OAuth 2.0, OIDC, SCIM implementations and mentor IAM Engineers, delivering scalable identity solutions for secure, compliant