Remote IAM Architect - Identity Resolution & Zero Trust

GovCIO; Austin (TX); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

EAP

Corporate Discounts

Learning Platform

Certification Assistance

Referral Bonus

Internal Mobility

Pet Insurance

Flexible Work

Job summary

GovCIO is seeking an IAM Architect specializing in identity resolution and person matching to design and lead enterprise capabilities that create a single authoritative identity across mission systems. This role owns the MPI architecture, deterministic and probabilistic matching, and zero-trust principles, including SSO using SAML/OIDC.

It is a fully remote position within the United States, requiring extensive IAM and cybersecurity expertise and relevant certifications.

Qualifications

• Bachelor's degree with 15+ years of engineering/architecture experience.
• 12+ years in identity and access management engineering/architecture.
• 8+ years in cybersecurity with at least 5 years IAM architecture in large-scale environments.
• Hands-on experience designing and implementing person identity matching across the enterprise.
• Deep knowledge of federated identity protocols (SAML, OAuth 2.0, OIDC, SCIM, AD/LDAP).
• Familiarity with NIST SP 800-63 and 800-207 Zero Trust Architecture.
• Certifications: CISSP, Security+ CE, CASP+ or equivalent.

Responsibilities

• Architect and lead enterprise identity resolution and person-matching across data stores.
• Design deterministic and probabilistic record-linkage strategies for identity resolution.
• Own Master Person Index (MPI) architecture, rules, and survivorship logic.
• Architect identity lifecycle management and privileged access controls with ICAM.
• Implement Zero Trust identity principles across networks and apps.
• Lead federated identity, directory services, authentication, and SSO (SAML, OAuth 2.0, OIDC, SCIM, AD/LDAP).
• Collaborate with data governance to define data-quality standards and auditability.
• Create architecture diagrams, data flows, and compliance artifacts for stakeholders.
• Mentor IAM Engineers and perform code reviews for automation scripts.
• Collaborate with cross-functional teams to deliver innovative solutions.
• Analyze identity-matching errors and improve data pipelines.

Skills

IAM Architecture

Identity Resolution

Federated Identity

Zero Trust

SAML/OAuth/OIDC

Education

Bachelor's degree in Computer Science or related field

Master's degree in a related field

Tools

SailPoint

Okta

Entra ID

Ping Identity

DigiCert

Job description

GovCIO is seeking an IAM Architect specializing in identity resolution and person matching to design and lead enterprise capabilities that create a single authoritative identity across mission systems. This role owns the MPI architecture, deterministic and probabilistic matching, and zero-trust principles, including SSO using SAML/OIDC.

It is a fully remote position within the United States, requiring extensive IAM and cybersecurity expertise and relevant certifications.