IAM Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the architecture and development of enterprise identity resolution and person-matching capabilities to create a single authoritative, deduplicated identity record across mission, HR, credentialing, and partner data repositories.

• Develop deterministic and probabilistic record-linkage strategies, incorporating fuzzy matching, weighted attribute scoring, and machine-learning-assisted matching techniques.

• Manage the architecture, integration, and lifecycle of a Master Person Index / Enterprise Identity Index, which includes establishing match/merge rules, survivorship logic, and tuning for false positives and false negatives.

• Design and implement identity lifecycle management processes, including provisioning/de-provisioning workflows and privileged access controls.

• Apply Zero Trust identity principles across enterprise network and application boundaries.

• Oversee federated identity, directory services, authentication, and Single Sign-On (SSO) architecture.

• Collaborate with data governance, privacy, and mission stakeholders to establish data quality standards, matching thresholds, and audit/traceability requirements.

• Create architecture diagrams, data flow representations, matching logic documentation, and compliance artifacts; provide briefings to government technical leads and stakeholders.

• Serve as a technical escalation point and mentor for IAM Engineers, offering architectural guidance and conducting code reviews.

• Work alongside cross-functional teams to clarify requirements, resolve issues, and implement solutions.

• Perform root-cause analysis of identity-matching discrepancies and promote ongoing enhancements to matching algorithms and data pipelines.

⛳️ Requirements

• A Bachelor's degree in Computer Science, Information Systems, or a related discipline, accompanied by 15 years of experience in engineering/architecture (or an equivalent combination of education and experience).

• A minimum of 12 years of experience in identity and access management engineering/architecture.

• At least 8 years of experience in Cybersecurity, with a focus on IAM Architecture within large-scale environments for no less than 5 years.

• Practical experience in designing and deploying person identity matching / identity resolution capabilities at an enterprise level, including deterministic and probabilistic record linkage.

• Extensive technical knowledge of SAML, OAuth 2.0, OIDC, SCIM, and Active Directory/LDAP architecture.

• Familiarity with NIST SP 800-63A/B/C and NIST SP 800-207.

• Possession of one or more certifications such as CISSP, Security+ CE, CASP+, or vendor-specific identity certifications.

• Ability to obtain and maintain a suitability/public trust clearance.

• Preferred: Experience with entity-resolution or Master Person Index (MPI).

• Preferred: Direct experience with SailPoint, Okta, Microsoft Entra ID, Ping Identity, or DigiCert.

• Preferred: Experience in supporting a federal identity-management or person-matching program.

• Preferred: Understanding of data governance frameworks and identity/ICAM integration.

• Preferred: Advanced knowledge of RESTful API authorization protocols and secure data-exchange gateways.

• Preferred: A Master's degree in a relevant technical field.

🏝️ Benefits

• Comprehensive health and wellness benefits.

• Opportunities for professional development and growth.

• Flexible work arrangements.

• Competitive salary and performance-based incentives.

• Supportive and collaborative work environment.