Remote IAM Architect: Master Identity & Zero Trust

GovCIO; Lansing (MI); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

EAP

Learning & Development platform (certs

Referral Bonus Program

Flexible Work Environment

Job summary

GovCIO is seeking an IAM Architect specializing in Identity Resolution and Person Matching to design and lead enterprise capabilities ensuring a single trusted identity across mission systems. This fully remote role within the United States requires expertise in deterministic and probabilistic matching, MPI management, and ICAM integration.

The role focuses on governance, lifecycle management, and secure access with SSO architectures, while mentoring IAM engineers and engaging with stakeholders

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or related field; extensive engineering/architecture experience.
• 12+ years of experience in identity and access management engineering/architecture.
• 8+ years in Cybersecurity with at least 5 years in IAM architecture.
• Hands-on experience with enterprise identity matching and resolution capabilities.
• Knowledge of federated identity protocols (SAML, OAuth 2.0, OIDC, SCIM, LDAP).
• Experience with NIST SP 800-63/800-207 and Zero Trust concepts.

Responsibilities

• Architect and lead enterprise identity resolution and person-matching across systems.
• Design deterministic and probabilistic record-linkage strategies.
• Own MPI/Enterprise Identity Index architecture, match/merge rules, survivorship.
• Manage identity lifecycle, provisioning/deprovisioning, and privileged access controls.
• Design Zero Trust principles across network and app boundaries.
• Lead federated identity, directory services, authentication, and SSO architectures (SAML, OAuth, OIDC, SCIM, LDAP).
• Collaborate with data governance and privacy stakeholders on data quality and auditability.
• Produce architecture diagrams, data flows, and compliance artifacts for government leads.
• Mentor IAM Engineers and review automation scripts.
• Collaborate with cross-functional teams to define requirements and deliver solutions.

Skills

Identity resolution

IAM architecture

Zero Trust

SAML, OAuth 2.0, OIDC

Federated identity

Data governance

Education

Bachelor's degree in Computer Science or Information Systems

15 years engineering/architecture experience

12+ years IAM engineering/architecture

Cybersecurity background with IAM focus

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Job description

GovCIO is seeking an IAM Architect specializing in Identity Resolution and Person Matching to design and lead enterprise capabilities ensuring a single trusted identity across mission systems. This fully remote role within the United States requires expertise in deterministic and probabilistic matching, MPI management, and ICAM integration.

The role focuses on governance, lifecycle management, and secure access with SSO architectures, while mentoring IAM engineers and engaging with stakeholders