Senior Identity & Directory Architect

Ignite IT, LLC; Suitland (MD); Hybride; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

401(k)

401(k) matching

Dental insurance

Flexible spending account

Health insurance

Life insurance

Paid time off

Professional development assistance

Referral program

Tuition reimbursement

Vision insurance

Résumé du poste

Ignite IT, LLC is seeking an IDMS Subject Matter Expert to deliver senior-level identity-management and directory services expertise across enterprise, cloud, and field solutions for a Government Agency modernization program. The role emphasizes secure SSO, MFA, Zero Trust, and device identity across USPS devices and enterprise apps.

The candidate will advise cross-functional teams and contribute to architecture, integration, and operational readiness, leveraging Entra ID, SAML, OAuth, and PKI

Qualifications

• 8+ years of progressive experience in enterprise IAM, directory services, identity engineering, cybersecurity, or related discipline.
• Strong hands-on experience with Microsoft Active Directory and Microsoft Entra ID.
• Strong knowledge of SAML, OAuth 2.0, OpenID Connect, LDAP, MFA, SSO, RBAC, federation, and identity lifecycle management.
• Experience designing IAM solutions across enterprise, cloud, hybrid-cloud, mobile, and application environments.
• Experience integrating identity services with enterprise applications, APIs, cloud platforms, mobile-device management / UEM, and security services.
• Demonstrated knowledge of Zero Trust identity principles, least privilege, privileged access, device identity, and risk-based authentication.
• Experience troubleshooting complex enterprise authentication and authorization issues.
• Experience developing architecture diagrams, technical requirements, integration specifications, standards, and operational documentation.
• Working knowledge of NIST security controls and federal cybersecurity environments.
• Strong written and verbal communication skills with the ability to collaborate across engineering, security, architecture, application, and program teams.

Responsabilités

• Serve as the senior technical SME for enterprise identity-management and directory-service architecture, engineering, integration, modernization, and troubleshooting.
• Assess current identity and directory architectures, configurations, integrations, security controls, operational processes, dependencies, scalability, and technical debt.
• Develop and maintain current-state, target-state, and transition architectures for identity-management capabilities supporting Government Agency enterprise and field solutions.
• Design and support enterprise SSO, federation, authentication, authorization, MFA, and identity lifecycle-management capabilities.
• Support Microsoft Entra ID integration, Conditional Access, MFA, RBAC, identity lifecycle management, device identity, risk-based access, compliance checks, automated remediation, and other Zero Trust controls associated with the Government Agency endpoint environment.
• Design identity and access patterns supporting Government Agency applications operating on USPS Android devices, including secure transitions between USPS and Government Agency application contexts.
• Support identity integration between Microsoft Intune / Entra ID, USPS UEM capabilities, Government Agency applications, APIs, enterprise directories, PKI, cloud environments, and security-monitoring platforms.
• Design and troubleshoot federation using SAML 2.0, OAuth 2.0, OpenID Connect, and related identity standards.
• Support certificate-based authentication, PIV/CAC integration, application certificates, PKI, secrets, service identities, and non-human identities as required.
• Define and evaluate RBAC, least-privilege, privileged-access, service-account, and administrative-access models.
• Evaluate identity dependencies during cloud, application, mobile, and infrastructure modernization initiatives.
• Develop identity architecture diagrams, interface definitions, technical standards, security patterns, operating procedures, and integration documentation.
• Participate in architecture reviews, technical design reviews, eARB activities, engineering working groups, requirements sessions, and solution assessments.
• Perform root-cause analysis for complex authentication, authorization, provisioning, federation, directory, synchronization, and application-access issues.
• Provide technical guidance, mentoring, and knowledge transfer to engineering, application, security, cloud, and operations teams.

Connaissances

Enterprise IAM

Active Directory

Entra ID

SAML

OAuth 2.0

OpenID Connect

LDAP

MFA

RBAC

Zero Trust

Outils

Microsoft Intune

Okta Workforce Identity

eDirectory

NetIQ Identity Manager

Description du poste

US CItizenship Required

Position Summary:

The IDMS Subject Matter Expert will provide senior technicalexpertisein enterprise identity, directory, authentication, authorization, federation, and access-management services supporting the Government Agency's modernization initiatives. The role will support current-state assessment, target-state architecture, modernization, integration, and operational-readiness activities performed under the Government Agency contract.

The SME will work across GovernmentAgencyenterprise architecture, cybersecurity, infrastructure, cloud, application, mobility, and project teams to ensure identity services are securely integrated into enterprise and field solutions. A major focus will be supporting the identity architecture required for large-scale field operations, including integration between Government Agency identity services, Microsoft Entra ID / Intune, Government Agency applications, and USPS-operated Android mobile devices. The role will help enable secure transitions between USPS and Government Agency applications while meeting SSO, MFA, device-identity, and Zero Trust requirements.

Key Responsibilities

• Serve as the senior technical SME for enterpriseidentity-managementand directory-service architecture, engineering, integration, modernization, and troubleshooting.

• Assess current identity and directory architectures, configurations, integrations, security controls, operational processes, dependencies, scalability, and technical debt.

• Develop andmaintaincurrent-state, target-state, and transition architectures for identity-management capabilities supporting Government Agency enterprise and field solutions.

• Design and support enterprise SSO, federation, authentication, authorization, MFA, and identity lifecycle-management capabilities.

• Support Microsoft Entra ID integration, Conditional Access, MFA, RBAC, identity lifecycle management, device identity, risk-based access, compliance checks, automated remediation, and other Zero Trust controls associated with the Government Agency endpoint environment.

• Design identity and access patterns supporting Government Agency applicationsoperatingon USPS Android devices, including secure transitions between USPS and Government Agency application contexts.

• Support identity integration between Microsoft Intune / Entra ID, USPS UEM capabilities, Government Agency applications, APIs, enterprise directories, PKI, cloud environments, and security-monitoring platforms.

• Design and troubleshoot federation using SAML 2.0, OAuth 2.0, OpenID Connect, and related identity standards.

• Support certificate-based authentication, PIV/CAC integration, application certificates, PKI, secrets, service identities, and non-human identities asrequired.

• Define and evaluate RBAC, least-privilege, privileged-access, service-account, and administrative-access models.

• Evaluate identity dependencies during cloud, application, mobile, and infrastructure modernization initiatives.

• Develop identity architecture diagrams, interface definitions, technical standards, security patterns, operating procedures, and integration documentation.

• Participate in architecture reviews, technical design reviews,eARBactivities, engineering working groups, requirements sessions, and solution assessments.

• Perform root-cause analysis for complex authentication, authorization, provisioning, federation, directory, synchronization, and application-access issues.

• Providetechnical guidance, mentoring, and knowledge transfer to engineering, application, security, cloud, and operations teams.

Required Qualifications

• 8+ years of progressive experience in enterprise IAM, directory services, identity engineering, cybersecurity, systems engineering, ora relateddiscipline.

• Strong hands-on experience with Microsoft Active Directory and Microsoft Entra ID.

• Strong knowledge of SAML, OAuth 2.0, OpenID Connect, LDAP, MFA, SSO, RBAC, federation, and identity lifecycle management.

• Experience designing IAM solutions across enterprise, cloud, hybrid-cloud, mobile, and application environments.

• Experience integrating identity services with enterprise applications, APIs, cloud platforms, mobile-device management / UEM, and security services.

• Demonstrated knowledge of Zero Trust identityprinciples, least privilege, privileged access, device identity, and risk-based authentication.

• Experience troubleshooting complex enterprise authentication and authorization issues.

• Experience developing architecture diagrams, technical requirements, integration specifications, standards, and operational documentation.

• Working knowledge of NIST security controls and federal cybersecurity environments.

• Strong written and verbal communication skills with the ability to collaborate across engineering, security, architecture, application, and program teams.

Preferred Qualifications

• Experience with Okta Workforce Identity, Adaptive MFA, federation, lifecycle management, or comparable Identity-as-a-Service capabilities.

• Experience with OpenText / NetIQ Identity Manager,eDirectory, Identity Console, or comparable enterprise identity-orchestration platforms.

• Experience with Microsoft Intune and device-based Conditional Access.

• Experience with PIV/CAC and federal PKI environments.

• Experience supporting identity services hostedinAWS GovCloud or Azure Government.

• PowerShell, Python, Java, REST API, or other identity automation and integration experience.

• ServiceNow integration and ITIL-based operations experience.

• Experience supporting a federal statistical agency, large civilian agency, or comparably complex federal environment.

• Relevant certifications in Microsoft Identity, Okta, cloud security, IAM, cybersecurity, or identity governance.

Core Competencies

• Enterprise identity architecture and engineering

• Identity lifecycle and account orchestration

• SSO, federation, MFA, and PIV integration

• Cloud and hybrid IAM modernization

• Mobile and device identity integration

• Complex identity troubleshooting

• Security, compliance, and Zero Trust

• Automation, integration, and technical documentation

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance

• Life insurance
• Paid time off
• Professional development assistance
• Referral program
• Tuition reimbursement
• Vision insurance