Remote IAM Architect: Master Identity Resolution & Privacy

GovCIO; Nashville (TN); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

EAP

Discounts

Learning platform

Education assistance

Referral bonus

Internal mobility

Pet insurance

Flexible work

Job summary

GovCIO is hiring an IAM Architect specializing in identity resolution and person matching to design enterprise capabilities for a single, trusted identity across mission systems. The role oversees MPI ownership, match/merge rules, survivorship, and data quality standards, with a focus on deduplication and fraud prevention.

The position is fully remote within the United States and requires strong experience with SAML, OAuth/OIDC, SCIM, and LDAP, plus NIST guidelines and zero trust principles.

Qualifications

• Bachelor's degree and 12+ years in IAM architecture or equivalent.
• 8+ years in cybersecurity with at least 5 years IAM focus.
• Hands-on identity matching/resolution experience at scale.
• Knowledge of SAML, OAuth 2.0, OIDC, SCIM, and LDAP.
• Familiarity with NIST SP 800-63/800-207 and zero trust.

Responsibilities

• Architect enterprise identity resolution and MPI that deduplicates records.
• Design deterministic and probabilistic record linkage strategies.
• Own Master Person Index architecture including survivorship and rules.
• Lead identity lifecycle, provisioning, and privileged access controls.
• Implement Zero Trust identity across network and apps.
• Lead federated identity and SSO using SAML, OAuth, OIDC, SCIM.
• Collaborate with governance teams on data quality and auditability.
• Create architecture diagrams, data flows, and compliance artifacts.
• Mentor IAM engineers and review automation scripts.
• Drive continuous improvement of identity matching pipelines.

Skills

IAM architecture

Identity resolution

Federated identity protocols

Zero Trust concepts

Security best practices

Problem solving

Education

Bachelor's degree in Computer Science or related field

Master's degree in a related technical field

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Active Directory/LDAP

Job description

GovCIO is hiring an IAM Architect specializing in identity resolution and person matching to design enterprise capabilities for a single, trusted identity across mission systems. The role oversees MPI ownership, match/merge rules, survivorship, and data quality standards, with a focus on deduplication and fraud prevention.

The position is fully remote within the United States and requires strong experience with SAML, OAuth/OIDC, SCIM, and LDAP, plus NIST guidelines and zero trust principles.