Remote IAM Architect: Identity Resolution & Zero Trust

GovCIO; City of Albany (NY); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

Employee Assistance Program (EAP)

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is hiring an IAM Architect specializing in identity resolution and person matching to design enterprise capabilities that create a single authoritative identity across mission systems.

The role leads MPI architecture, deterministic/probabilistic matching, and Zero Trust across networks. Remote within the United States, with a strong focus on ICAM and data governance, privacy, and auditability.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related field with extensive engineering/architecture experience.
• 12+ years of identity and access management engineering/architecture experience.
• 8+ years in cybersecurity with at least 5 years in IAM architecture.

Responsibilities

• Architect and lead enterprise identity resolution and person-matching capabilities to create a single golden record across data stores.
• Design deterministic and probabilistic record-linkage strategies for accurate identity resolution.
• Own MPI/Enterprise Identity Index architecture, including rules, survivorship, and tuning.
• Architect identity lifecycle management and privileged access controls with ICAM programs.
• Implement Zero Trust identity across networks and apps; lead X‑team collaboration.
• Lead federated identity, directory services, authentication, and SSO architectures (SAML, OAuth 2.0, OIDC, SCIM, LDAP).
• Define data-quality standards and auditability with stakeholders; produce diagrams and documentation.
• Mentor IAM engineers and review automation scripts; drive issue resolution and improvements.
• Collaborate with cross-functional teams to define requirements and deliver solutions.

Skills

IAM Architecture

Identity resolution

Federated identity

SAML/OAuth/OIDC

Education

Bachelor's degree in CS/IS

Master's degree (preferred)

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Job description

GovCIO is hiring an IAM Architect specializing in identity resolution and person matching to design enterprise capabilities that create a single authoritative identity across mission systems.

The role leads MPI architecture, deterministic/probabilistic matching, and Zero Trust across networks. Remote within the United States, with a strong focus on ICAM and data governance, privacy, and auditability.