Senior IAM Architect: Zero Trust & Passwordless

ICF; Washington (District of Columbia); Hybrid; USD 108,006 - 183,610; Full time

Job summary

ICF is seeking an IAM Lead to architect, implement, and operate the identity and access management platform for a federal technology program. Reporting to engineering leadership, this role is the subject matter authority on how users, devices, and applications authenticate and are authorized across a cloud-first, Zero Trust environment.

The IAM Lead owns the full identity lifecycle, from onboarding automation to privileged access controls to external identity federation.

Qualifications

• Bachelor's degree or equivalent.
• 7+ years of IAM engineering experience.
• 3+ years designing and operating Entra ID or Okta in production.
• 2+ years implementing PAM and just-in-time elevation.
• 2+ years configuring RBAC/PBAC/ABAC in enterprise environments.
• 2+ years supporting federal IT programs.
• U.S. Citizenship and ability to obtain Public Trust.

Responsibilities

• Architect, configure, and maintain IAM platforms (Entra ID, Entra External ID, Okta).
• Enforce phishing-resistant authentication and transition to passwordless posture.
• Define and implement Zero Trust access policies based on risk and device health.
• Design authorization models (RBAC, PBAC, ABAC) with least privilege.
• Manage privileged accounts with PAM and time-bound elevated access.
• Automate joiner/mover/leaver processes triggered by HR events.
• Federate external identities (partners/contractors) with self-service workflows.
• Ensure identity proofing per NIST IAL/AAL levels and coordinate with security teams.
• Integrate apps with identity platforms via SSO and provisioning.
• Monitor sign-ins and respond to identity-related incidents.

Skills

IAM engineering

Zero Trust

Federation & SSO

NIST requirements

Incident response

Education

Bachelor's degree or equivalent

Tools

Entra ID

Entra External ID

Okta

PAM tooling

OIDC/OAuth2/SAML/SCIM

Job description

ICF is seeking an IAM Lead to architect, implement, and operate the identity and access management platform for a federal technology program. Reporting to engineering leadership, this role is the subject matter authority on how users, devices, and applications authenticate and are authorized across a cloud-first, Zero Trust environment.

The IAM Lead owns the full identity lifecycle, from onboarding automation to privileged access controls to external identity federation.