Remote IAM Architect: Identity Resolution & Zero Trust

GovCIO; Santa Fe (NM); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

Employee Assistance Program

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is seeking an IAM Architect specializing in Identity Resolution and Person Matching to design enterprise capabilities that create a single trusted identity across mission and business systems for the Department of Veterans Affairs. You will own the Master Person Index and manage deterministic and probabilistic matching, survivorship rules, and data governance alignment.

The role combines ICAM engineering with modern identity protocols (SAML, OAuth 2.0, OIDC, SCIM) and Zero Trust

Qualifications

• Bachelor’s degree and 15+ years in engineering/architecture.
• 12+ years IAM engineering/architecture experience.
• 8+ years in cybersecurity with 5+ years IAM architecture at scale.
• Hands‑on identity matching/resolution across enterprise data.

Responsibilities

• Architect and lead enterprise identity resolution capabilities across data stores.
• Design deterministic and probabilistic record‑linkage strategies for accurate identity resolution.
• Own MPI/Enterprise Identity Index architecture, rules, and survivorship logic.
• Design identity lifecycle management and privileged access workflows.
• Apply Zero Trust principles across network and app boundaries.
• Lead federated identity, directory services, authentication, and SSO (SAML, OAuth 2.0, OIDC, SCIM, AD/LDAP).
• Collaborate with data governance to define data quality standards and auditability.
• Create architecture diagrams, data flows, and documentation; brief leadership.
• Mentor IAM engineers and review automation code.
• Work with cross‑functional teams to troubleshoot and deliver solutions.

Skills

IAM architecture

Identity resolution

Deterministic/probabilistic matching

Federated identity protocols

Zero Trust

SAML/OAuth/OIDC/SCIM

Active Directory/LDAP

Threat modeling / data governance

Education

Bachelor's degree in Computer Science or related field

Master's degree in a related field

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Job description

GovCIO is seeking an IAM Architect specializing in Identity Resolution and Person Matching to design enterprise capabilities that create a single trusted identity across mission and business systems for the Department of Veterans Affairs. You will own the Master Person Index and manage deterministic and probabilistic matching, survivorship rules, and data governance alignment.

The role combines ICAM engineering with modern identity protocols (SAML, OAuth 2.0, OIDC, SCIM) and Zero Trust