Remote IAM Architect: Master Identity & Zero Trust Leader

GovCIO; Madison (WI); Remote; USD 155,000 - 175,000; Full time

Benefits offered by this job

Employee Assistance Program (EAP)

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is hiring an IAM Architect specializing in identity resolution and person matching to design and lead enterprise capabilities for a single trusted identity across systems. This fully remote role is within the United States.

The candidate will own the architecture for matching, deduplication, and linking person records, combining ICAM engineering with deterministic and probabilistic identity matching to reduce duplicates and improve data quality enterprise-wide.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related field; 15 years of experience or equivalent.
• 12+ years in identity and access management engineering/architecture.
• 8+ years in Cybersecurity with IAM Architecture in large-scale environments.
• Hands-on experience with enterprise identity matching/resolution at scale.
• Understanding of federated identity protocols (SAML, OAuth 2.0, OIDC, SCIM, AD/LDAP).
• Knowledge of NIST Digital Identity Guidelines and Zero Trust Architecture.

Responsibilities

• Architect and lead enterprise identity resolution and person matching to create a golden record.
• Design deterministic and probabilistic record-linkage strategies for accurate identity resolution.
• Own MPI/Enterprise Identity Index architecture including rules and survivorship logic.
• Architect identity lifecycle, provisioning workflows, and privileged access controls.
• Implement Zero Trust identity principles across networks and apps.
• Lead federation, directory services, authentication, and SSO architectures.
• Collaborate with data governance to define data-quality standards and auditability.
• Develop architecture diagrams, data flows, and compliance artifacts; brief stakeholders.
• Mentor IAM Engineers and review automation scripts.

Skills

Bachelor's degree in Computer Science,

IAM Architecture

Identity Resolution

Deterministic matching

Probabilistic matching

Federated identity protocols

SAML

OAuth 2.0

OIDC

SCIM

Active Directory/LDAP

Education

Bachelor's degree in Computer Science, Information Systems, or a related field

15 years of engineering/architecture experience

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Job description

GovCIO is hiring an IAM Architect specializing in identity resolution and person matching to design and lead enterprise capabilities for a single trusted identity across systems. This fully remote role is within the United States.

The candidate will own the architecture for matching, deduplication, and linking person records, combining ICAM engineering with deterministic and probabilistic identity matching to reduce duplicates and improve data quality enterprise-wide.