IAM Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Offer technical leadership and direction to program managers and key stakeholders regarding enterprise-level IAM projects and solutions.

• Develop IAM solutions to facilitate PIV/Certificate Based Authentication and FIDO2.

• Assist in the integration of IAM into business applications and third-party services.

• Enable Single Sign-On using SAML, OAuth, and OpenID Connect protocols.

• Work with customers to establish organizational constructs, naming conventions, and user access roles.

• Lead the development of processes and workflows for user onboarding, lifecycle management, and privileged access management.

• Provide guidance to business stakeholders on best practices for Identity and Access Management.

• Define, enhance, and support Azure Entra ID, Certificate Lifecycle Management, and Privileged Access Management.

• Identify prospects for automation in solutions such as onboarding and offboarding.

• Collaborate with Microsoft Azure, Network, and Security Architects.

• Liaise with vendors to assess, test, and implement technological solutions.

• Design solutions for implementation by the IAM engineering team.

⛳️ Requirements

• Capability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD); active EOD preferred.

• BA/BS degree with 10 years of relevant experience; or AA degree with 15 years of applicable experience.

• Experience in the Identity domain with a background in identity management tools.

• In-depth knowledge of HSPD12 and the implementation of government smart card authentication.

• Expert understanding of authentication methods including SAML, OAuth, OpenID, WSO2, and Kerberos.

• Prior experience providing RBAC solutions for cloud environments (e.g., Azure).

• Strong skills in scripting and automation, particularly with PowerShell.

• Familiarity with Microsoft Azure PIM, Access Reviews, Service Principals, Managed Identities, and ABAC.

• Comprehensive knowledge of enterprise PKI integration with SCEP and ACME clients.

• Experience in producing technical architecture documentation.

• Excellent communication and writing skills.

• ITILv3 or v4 Foundation certification.

• Previous experience with DHS or DoD.

• Microsoft Azure Fundamentals certification.

• CompTIA A+, Network+, or Security+ certifications.

• Experience with Azure Cloud, scripting, and automation.

🏝️ Benefits

• Flexible time off benefit.

• Extensive learning resources.

• Healthcare benefits.

• Wellness benefits.

• Financial benefits.

• Retirement benefits.

• Family support benefits.

• Continuing education benefits.

• Competitive compensation.

• Opportunities for learning and development.