Zero Trust Identity Architect & Engineer

Remote; San Francisco (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Medical coverage

401k match

PTO + holidays

Certifications support

Job summary

True Zero Technologies seeks an Identity Management Engineer/Architect to design, implement, and operate a scalable IAM/ICAM platform across on-prem, cloud, SaaS, and hybrid environments. You will manage provisioning, deprovisioning, and role-based access using SAML, OIDC, OAuth, and SCIM, with PAM, IGA, and PIV/CAC authentication, aligned to FICAM and Zero Trust principles.

The role emphasizes automated governance, secure integration, and continuous identity monitoring.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.

Responsibilities

• Design, implement, and operate enterprise IAM / ICAM architectures supporting on-premises, cloud, SaaS, and hybrid environments.
• Engineer and maintain directory services, including Active Directory and Microsoft Entra ID where included in the approved architecture.
• Design and automate user provisioning, deprovisioning, role assignment, access changes, and identity lifecycle management processes.
• Integrate enterprise applications using modern identity and federation standards including SAML, OpenID Connect (OIDC), OAuth, and SCIM.
• Implement and maintain Privileged Access Management (PAM) controls for administrative, elevated, and high-risk accounts.
• Design and operate Identity Governance and Administration (IGA) capabilities using SailPoint or approved platforms.
• Integrate and administer AWS IAM Identity Center and related AWS identity and access-management capabilities.
• Implement PIV/CAC smart-card authentication, certificate-based authentication, and other approved strong-authentication mechanisms.
• Enforce phishing-resistant multi-factor authentication for privileged and mission-critical access.
• Align identity architectures, authentication methods, credential lifecycle processes, and access controls with FICAM requirements and applicable government identity standards.
• Develop and enforce least-privilege, role-based, and policy-based access controls across enterprise systems and applications.
• Automate identity-management processes using scripting, APIs, infrastructure-as-code, and workflow technologies.
• Integrate PAM, IGA, directory, cloud identity, and authentication platforms to provide consistent identity controls across environments.
• Implement monitoring, logging, auditing, and alerting for authentication events, privileged activity, identity lifecycle changes, and access-policy violations.
• Perform periodic access reviews, entitlement analysis, privileged-account reviews, and identity-governance activities.
• Partner with application, cloud, cybersecurity, platform, and DevSecOps teams to securely onboard applications and services into enterprise identity platforms.
• Troubleshoot complex authentication, federation, provisioning, directory synchronization, authorization, and access-management issues.
• Maintain identity architecture documentation, integration standards, operational procedures, access-control models, and governance processes.

Skills

Active Directory

Microsoft Entra ID

SAML/OIDC/OAuth/SCIM

Privileged Access Management

Identity Governance and Administration

PIV/CAC

Zero Trust

Scripting & APIs

AWS IAM Identity Center

Federation & provisioning

Education

Bachelor’s degree in Cybersecurity/CS/IT/Info Systems or related field

Tools

PowerShell

Python

Terraform

Job description

True Zero Technologies seeks an Identity Management Engineer/Architect to design, implement, and operate a scalable IAM/ICAM platform across on-prem, cloud, SaaS, and hybrid environments. You will manage provisioning, deprovisioning, and role-based access using SAML, OIDC, OAuth, and SCIM, with PAM, IGA, and PIV/CAC authentication, aligned to FICAM and Zero Trust principles.

The role emphasizes automated governance, secure integration, and continuous identity monitoring.