Remote IAM Architect: Identity Resolution & Zero Trust

GovCIO; Topeka (KS); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

Employee perks

Job summary

The candidate will own MPI architecture, provide mentorship, and collaborate with stakeholders while supporting Zero Trust and SSO architectures across the enterprise.

Qualifications

• Bachelor's degree in CS, Info Systems, or related field with extensive IAM architecture experience.
• 12+ years of identity and access management engineering/architecture experience.
• 8+ years cybersecurity with at least 5 years in IAM architecture in large-scale environments.
• Hands-on experience designing and implementing person identity matching / identity resolution at enterprise scale.

Responsibilities

• Architect and lead enterprise identity resolution and person-matching capabilities to create a golden record across data stores.
• Design deterministic and probabilistic record-linkage strategies, including fuzzy matching and ML-assisted matching.
• Own Master Person Index architecture, match/merge rules, survivorship logic, and tuning.
• Architect identity lifecycle management and privileged access controls with ICAM program.
• Design and implement Zero Trust identity principles across networks and applications.
• Lead federated identity, directory services, authentication, and SSO (SAML, OAuth 2.0, OIDC, SCIM, AD/LDAP).
• Collaborate with data governance and privacy to define data-quality standards and audit requirements.
• Develop architecture diagrams, data flows, and compliance artifacts; brief to government leads.
• Mentor IAM Engineers and provide architectural oversight on automation scripts.
• Collaborate with cross-functional teams to meet requirements and deliver solutions.
• Perform root-cause analysis of identity-matching errors and improve pipelines.

Skills

IAM Architecture

Identity Resolution

Federated Identity

Zero Trust

Education

Bachelor's degree in Computer Science or related field

CISSP or equivalent certification

5+ years IAM architecture experience

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

Job description

The candidate will own MPI architecture, provide mentorship, and collaborate with stakeholders while supporting Zero Trust and SSO architectures across the enterprise.