Senior IAM Architect: Zero Trust & Passwordless

ICF

Washington (District of Columbia)

Hybrid

USD 108,006 - 183,610

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

ICF is seeking an IAM Lead to architect, implement, and operate the identity and access management platform for a federal technology program. Reporting to engineering leadership, this role is the subject matter authority on how users, devices, and applications authenticate and are authorized across a cloud-first, Zero Trust environment.

The IAM Lead owns the full identity lifecycle, from onboarding automation to privileged access controls to external identity federation.

Qualifications

Bachelor's degree or equivalent.
7+ years of IAM engineering experience.
3+ years designing and operating Entra ID or Okta in production.
2+ years implementing PAM and just-in-time elevation.
2+ years configuring RBAC/PBAC/ABAC in enterprise environments.
2+ years supporting federal IT programs.
U.S. Citizenship and ability to obtain Public Trust.

Responsibilities

Architect, configure, and maintain IAM platforms (Entra ID, Entra External ID, Okta).
Enforce phishing-resistant authentication and transition to passwordless posture.
Define and implement Zero Trust access policies based on risk and device health.
Design authorization models (RBAC, PBAC, ABAC) with least privilege.
Manage privileged accounts with PAM and time-bound elevated access.
Automate joiner/mover/leaver processes triggered by HR events.
Federate external identities (partners/contractors) with self-service workflows.
Ensure identity proofing per NIST IAL/AAL levels and coordinate with security teams.
Integrate apps with identity platforms via SSO and provisioning.
Monitor sign-ins and respond to identity-related incidents.