Zero-Trust IAM Architect - Distinguished Engineer

Capital One; Richmond (VA); On-site; USD 245,000 - 279,000; Full time

Job summary

Capital One in McLean, VA (and other locations) is seeking a Distinguished Engineer to architect the next generation IAM, moving to Just-In-Time access and policy-based authorization in a regulated financial environment.

You will lead the transition from permanent access to zero standing privileges, define policy-as-code, and build an identity-centric platform with self-service APIs, while ensuring compliance and high-scale performance.

Qualifications

• Bachelor’s Degree
• 7+ years of experience in Software engineering and solution architecture
• 7+ years of experience in Enterprise architecture and design patterns

Responsibilities

• The Move to Just-In-Time (JIT): Architect the transition away from permanent access to zero standing privileges.
• Policy-as-Code & Abstraction: Lead the effort to abstract IGA components toward a centralized, policy-based model.
• Contextual & Adaptive Security: Design an authorization fabric with device posture, network risk, and user behavior.

Skills

Architectural leadership

IAM

Policy-as-Code

Zero Trust

Cloud architectures

Education

Bachelor's Degree

Bachelor's or Master's Degree in Computer Science or related field

Tools

Java

Python

Go

JavaScript/TypeScript

Swift

Job description

Capital One in McLean, VA (and other locations) is seeking a Distinguished Engineer to architect the next generation IAM, moving to Just-In-Time access and policy-based authorization in a regulated financial environment.

You will lead the transition from permanent access to zero standing privileges, define policy-as-code, and build an identity-centric platform with self-service APIs, while ensuring compliance and high-scale performance.