Senior Power Platform Identity Architect (Zero Trust, ICAM)

GovCIO; Alexandria (VA); Hybrid; USD 135,000 - 172,000; Full time

Job summary

GovCIO is seeking an SME Systems Engineer specializing in Identity Management (IdM) and Automation, focusing on the Power Platform, to support ICAM modernization for the U.S. Coast Guard.

The role is located in Alexandria, VA and will be hybrid. You will design and implement secure identity-centric access control across legacy and modern enterprise architectures, including PKI, MFA, SSO, and zero trust frameworks, while migrating legacy automation to cloud-native solutions such as Power Automate

Qualifications

• DoD 8570 IAT Level II or higher certifications.
• Deep understanding of federated identity concepts (SAML, OAuth, OIDC).
• CAC authentication with PKI certificate validation experience.
• Experience applying federal Zero Trust identity guidelines (NIST SP 800-207).

Responsibilities

• Lead modernization of legacy access controls into secure ICAM solutions.
• Manage directories, federation, authentication, authorization, and SSO protocols.
• Architect identity lifecycles, provisioning workflows, and privilege management.
• Design and deploy Zero Trust identity principles (NIST SP 800-207).
• Configure PKI systems, credentials, and authenticators.
• Implement access control including MFA, SSO, and PAM.
• Build federated identity services for secure interoperability.
• Perform root-cause analysis, privilege audits, and performance tuning.
• Develop interfaces, data flows, and compliance documentation.
• Own Power Platform & Automation architecture, migrate on-prem scripts to cloud-native solutions.
• Lead Power Platform applications (MPM/PUMP) and updates.

Skills

Security+ or higher

SAML/OIDC/OAuth

CAC / PKI

Zero Trust

Power Platform

Power Automate

Logic Apps

Azure Functions

Federated Identity

SSO

Education

High School with 10+ years

Tools

SailPoint

Okta

Microsoft Entra ID

Ping Identity

DigiCert

Power BI

Job description

GovCIO is seeking an SME Systems Engineer specializing in Identity Management (IdM) and Automation, focusing on the Power Platform, to support ICAM modernization for the U.S. Coast Guard.

The role is located in Alexandria, VA and will be hybrid. You will design and implement secure identity-centric access control across legacy and modern enterprise architectures, including PKI, MFA, SSO, and zero trust frameworks, while migrating legacy automation to cloud-native solutions such as Power Automate