IAM Architect

GovCIO

. Architect and lead enterprise identity resolution and person-matching capabilities establishing a single authoritative, deduplicated identity record across mission, HR, credentialing, and partner data stores .

Posted 11/10/2026full-timeRemote • United StatesSeniorLead💰 $155,000 - $175,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in architecting and leading enterprise identity resolution and person-matching capabilities, with a strong focus on identity lifecycle management and Zero Trust principles. Proficient in designing deterministic and probabilistic record-linkage strategies while ensuring compliance with data governance standards.

Highest-signal resume keywords

Identity And Access Management EngineeringEnterprise Identity ResolutionSAML, OAuth 2.0, OIDC, SCIMCISSP, Security+ CE, CASP+Master Person Index Architecture

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Lifecycle ManagementDeterministic Record LinkageProbabilistic Record LinkageFuzzy MatchingWeighted Attribute ScoringMachine-Learning-Assisted MatchingRoot-Cause AnalysisData Pipeline ImprovementZero Trust Identity PrinciplesPrivileged Access Controls

Soft Skills

Technical MentorshipCollaborationProblem-SolvingCommunication

Tools & Technologies

SailPointOktaMicrosoft Entra IDPing IdentityDigiCert

Certifications & Qualifications

CISSPSecurity+ CECASP+

Industry Keywords

NIST SP 800-63A/B/CNIST SP 800-207Data GovernanceIdentity ManagementICAM Integration

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Architect and lead enterprise identity resolution and person-matching capabilities establishing a single authoritative, deduplicated identity record across mission, HR, credentialing, and partner data stores
Design deterministic and probabilistic record-linkage strategies, including fuzzy matching, weighted attribute scoring, and machine-learning-assisted matching
Own the architecture, integration, and lifecycle management of a Master Person Index / Enterprise Identity Index, including match/merge rules, survivorship logic, and false-positive/false-negative tuning
Architect identity lifecycle management, provisioning/de-provisioning workflows, and privileged access controls
Design and implement Zero Trust identity principles across enterprise network and application boundaries
Lead federated identity, directory services, authentication, and SSO architecture
Partner with data governance, privacy, and mission stakeholders to define data-quality standards, matching thresholds, and audit/traceability requirements
Develop architecture diagrams, data flows, matching-logic documentation, and compliance artifacts; brief government technical leads and stakeholders
Act as a technical escalation point and mentor for IAM Engineers, providing architectural oversight and code reviews
Collaborate with cross-functional teams to define requirements, troubleshoot issues, and deliver solutions
Conduct root-cause analysis of identity-matching errors and drive continuous improvement of matching algorithms and data pipelines

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Systems, or a related field, and 15 years of experience engineering/architecture (or commensurate combination of education and experience)
12+ years of experience in identity and access management engineering/architecture
8+ years in Cybersecurity with at least 5 years dedicated to IAM Architecture in large-scale environments
Hands-on experience designing and implementing person identity matching / identity resolution capabilities at enterprise scale, including deterministic and probabilistic record linkage
Deep technical understanding of SAML, OAuth 2.0, OIDC, SCIM, and Active Directory/LDAP architecture
Working knowledge of NIST SP 800-63A/B/C and NIST SP 800-207
One or more certifications: CISSP, Security+ CE, CASP+, or vendor-specific identity certifications
Must be able to obtain and maintain a suitability/public trust clearance
Preferred: Experience with entity-resolution or Master Person Index (MPI)
Preferred: Direct experience with SailPoint, Okta, Microsoft Entra ID, Ping Identity, or DigiCert
Preferred: Experience supporting a federal identity-management or person-matching program
Preferred: Knowledge of data governance frameworks and identity/ICAM integration
Preferred: Advanced knowledge of RESTful API authorization protocols and secure data-exchange gateways
Preferred: Master's degree in a related technical field