Senior IAM Architect - Passwordless & Zero Trust (Remote)

ICF Olson; Washington (District of Columbia); Hybrid; USD 108,000 - 184,000; Full time

Job summary

ICF is seeking an IAM Lead to architect, implement, and operate the identity and access management platform for a federal technology program. This role reports to engineering leadership and drives a cloud-first, Zero Trust identity program in the United States.

You will manage the full identity lifecycle, including onboarding automation, privileged access controls, and external federation. A senior identity engineer with federal cloud experience is ideal.

Qualifications

• Bachelor’s degree or equivalent.
• 7+ years in identity and access management engineering.
• 3+ years hands-on Entra ID or Okta in production environments.
• 2+ years implementing PAM solutions and just‑in‑time elevation controls.
• 2+ years configuring authorization models (RBAC/PBAC/ABAC).
• 2+ years federal IT program experience in HHS, NIH, FDA, or health agencies.
• U.S. Citizenship required due to federal contract requirements.

Responsibilities

• Architect, configure, and maintain identity platforms (Entra ID, Entra External ID, Okta).
• Enforce phishing-resistant authentication (passkeys, FIDO2, WebAuthn, biometrics).
• Drive passwordless posture and Zero Trust access rules.
• Define authorization models aligned to least-privilege.
• Manage privileged accounts with PAM and time-bound elevation.
• Automate joiner/mover/leaver workflows from HR events.
• Federate external identities with Entra External ID and consent workflows.
• Integrate apps with OIDC, OAuth2, SAML, SCIM for SSO and provisioning.
• Monitor sign-in activity, risk signals, and anomalies.
• Respond to identity incidents in coordination with cybersecurity.

Skills

IAM engineering

PAM/Just‑in‑Time

RBAC/PBAC/ABAC

Federal IT programs

Zero Trust

Entra ID

Okta

Education

Bachelor’s degree or equivalent

Tools

Entra ID

Entra External ID

Okta

Job description

ICF is seeking an IAM Lead to architect, implement, and operate the identity and access management platform for a federal technology program. This role reports to engineering leadership and drives a cloud-first, Zero Trust identity program in the United States.

You will manage the full identity lifecycle, including onboarding automation, privileged access controls, and external federation. A senior identity engineer with federal cloud experience is ideal.