Senior IAM Architect: Zero Trust & PAM Lead (Remote)

ICF; Richmond (VA); Hybrid; USD 108,006 - 183,610; Full time

Job summary

ICF is seeking an IAM Lead to architect, implement, and operate the identity and access management platform for a federal technology program. This senior role requires deep expertise in Entra ID, Okta, andZero Trust, with a focus on secure authentication, authorization, and lifecycle management across cloud environments.

The role emphasizes governance with NIST-aligned assurance, federations, and PAM controls, reporting to engineering leadership.

Qualifications

• 7+ years of identity and access management engineering experience.
• 3+ years designing and operating Entra ID or Okta in production.
• 2+ years implementing PAM solutions and just-in-time elevation controls.
• 2+ years configuring RBAC, PBAC, or ABAC in large enterprises.
• 2+ years supporting federal IT programs in health or federal agencies.

Responsibilities

• Architect, configure, and operate IAM platforms (Entra ID, Entra External ID, Okta) across users, apps, and devices.
• Enforce phishing-resistant authentication and move toward passwordless posture.
• Define Zero Trust access rules and risk-based policies.
• Design and operate RBAC, PBAC, and ABAC models with least-privilege controls.
• Manage privileged accounts with PAM and time-bound elevation.
• Implement HR-driven joiner/mover/leaver automation and automated provisioning.
• Federate external identities with partners and contractors with self-service workflows.
• Coordinate identity proofing to NIST IAL/AAL levels with security teams.
• Integrate apps via OIDC, OAuth2, SAML, SCIM for SSO and provisioning.
• Monitor and respond to identity incidents and maintain data quality across directories.

Skills

IAM engineering

Entra ID/Okta

PAM & JIT elevation

RBAC/PBAC/ABAC

Federal IT experience

US Citizenship

Public Trust

Education

Bachelor’s degree or equivalent

Job description

ICF is seeking an IAM Lead to architect, implement, and operate the identity and access management platform for a federal technology program. This senior role requires deep expertise in Entra ID, Okta, andZero Trust, with a focus on secure authentication, authorization, and lifecycle management across cloud environments.

The role emphasizes governance with NIST-aligned assurance, federations, and PAM controls, reporting to engineering leadership.