Senior IAM Architect: Zero Trust & PAM Lead (Remote)

ICF

Richmond (VA)

Hybrid

USD 108,006 - 183,610

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

ICF is seeking an IAM Lead to architect, implement, and operate the identity and access management platform for a federal technology program. This senior role requires deep expertise in Entra ID, Okta, andZero Trust, with a focus on secure authentication, authorization, and lifecycle management across cloud environments.

The role emphasizes governance with NIST-aligned assurance, federations, and PAM controls, reporting to engineering leadership.

Qualifications

7+ years of identity and access management engineering experience.
3+ years designing and operating Entra ID or Okta in production.
2+ years implementing PAM solutions and just-in-time elevation controls.
2+ years configuring RBAC, PBAC, or ABAC in large enterprises.
2+ years supporting federal IT programs in health or federal agencies.

Responsibilities

Architect, configure, and operate IAM platforms (Entra ID, Entra External ID, Okta) across users, apps, and devices.
Enforce phishing-resistant authentication and move toward passwordless posture.
Define Zero Trust access rules and risk-based policies.
Design and operate RBAC, PBAC, and ABAC models with least-privilege controls.
Manage privileged accounts with PAM and time-bound elevation.
Implement HR-driven joiner/mover/leaver automation and automated provisioning.
Federate external identities with partners and contractors with self-service workflows.
Coordinate identity proofing to NIST IAL/AAL levels with security teams.
Integrate apps via OIDC, OAuth2, SAML, SCIM for SSO and provisioning.
Monitor and respond to identity incidents and maintain data quality across directories.