Identity Management Engineer / Architect
No salary listed
Mid
Bachelor's
Remote in USA
Remote
CybersecuritySecurity Engineering & Architecture
About the job
Requirements
- A bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline is required.
- Demonstrated experience designing, engineering, or administering enterprise identity and access management or identity, credential, and access management solutions is required.
- Strong experience with Active Directory and cloud-based directory services such as Microsoft Entra ID is required.
- Hands-on experience with identity federation and provisioning standards, including Security Assertion Markup Language, OpenID Connect, OAuth, and System for Cross-domain Identity Management, is required.
- Experience implementing or operating Privileged Access Management platforms and privileged identity workflows is required.
- Experience with Identity Governance and Administration, preferably using SailPoint IdentityIQ or SailPoint Identity Security Cloud, is required.
- Experience with AWS Identity and Access Management, AWS IAM Identity Center, and cloud identity integration is required.
- Strong understanding of authentication, authorization, role-based access control, attribute-based access control, least privilege, and identity lifecycle management is required.
- Experience implementing PIV/CAC, certificate-based authentication, and phishing-resistant multi-factor authentication is required.
- Familiarity with FICAM, federal identity standards, and authentication requirements for government environments is required.
- Strong understanding of Zero Trust architecture, with emphasis on identity as a policy-enforcement and access-control pillar, is required.
- Experience automating identity workflows using APIs, scripting languages, PowerShell, Python, Terraform, or comparable automation technologies is required.
- Experience integrating identity platforms with SaaS applications, cloud services, enterprise applications, and hybrid infrastructure is required.
- Experience with centralized logging, identity monitoring, audit reporting, access reviews, and compliance evidence collection is required.
- Strong architecture, troubleshooting, documentation, governance, and cross-functional collaboration skills are required.
Responsibilities
- Design, implement, and operate enterprise IAM/ICAM architectures supporting on-premises, cloud, SaaS, and hybrid environments.
- Engineer and maintain directory services, including Active Directory and Microsoft Entra ID where included in the approved architecture.
- Design and automate user provisioning, deprovisioning, role assignment, access changes, and identity lifecycle management processes.
- Integrate enterprise applications using modern identity and federation standards, including SAML, OpenID Connect (OIDC), OAuth, and SCIM.
- Implement and maintain Privileged Access Management (PAM) controls for administrative, elevated, and high-risk accounts.
- Design and operate Identity Governance and Administration (IGA) capabilities using SailPoint or approved enterprise identity-governance platforms.
- Integrate and administer AWS IAM Identity Center and related AWS identity and access-management capabilities.
- Implement PIV/CAC smart-card authentication, certificate-based authentication, and other approved strong-authentication mechanisms.
- Enforce phishing-resistant multi-factor authentication for privileged and mission-critical access.
- Align identity architectures, authentication methods, credential lifecycle processes, and access controls with FICAM requirements and applicable government identity standards.
- Develop and enforce least-privilege, role-based, and policy-based access controls across enterprise systems and applications.
- Automate identity-management processes using scripting, APIs, infrastructure-as-code, and workflow technologies.
- Integrate PAM, IGA, directory, cloud identity, and authentication platforms to provide consistent identity controls across environments.
- Implement monitoring, logging, auditing, and alerting for authentication events, privileged activity, identity lifecycle changes, and access-policy violations.
- Perform periodic access reviews, entitlement analysis, privileged-account reviews, and identity-governance activities.
- Partner with application, cloud, cybersecurity, platform, and DevSecOps teams to securely onboard applications and services into enterprise identity platforms.
- Troubleshoot complex authentication, federation, provisioning, directory synchronization, authorization, and access-management issues.
- Maintain identity architecture documentation, integration standards, operational procedures, access-control models, and governance processes.
Desired Qualifications
- Experience supporting government, defense, GovCloud, or other regulated environments is preferred.
- AWS Certified Security – Specialty certification is preferred.
- Microsoft Certified: Identity and Access Administrator Associate (SC-300) certification is preferred.
- Microsoft Certified: Cybersecurity Architect Expert (SC-100) certification is preferred.
- Certified Information Systems Security Professional (CISSP) certification is preferred.
- SailPoint IdentityIQ or Identity Security Cloud certification is preferred.
- CyberArk Defender or CyberArk Sentry certification is preferred.
About the company
True Zero Technologies provides security and technology management services by implementing Splunk-based data analytics for organizations in sectors like healthcare, finance, and government. These solutions work by collecting and analyzing large amounts of machine data to help clients monitor their IT systems and detect cybersecurity threats in real-time. As a veteran-owned business, the company differentiates itself by using a team of seasoned industry experts to deliver repeatable, standardized service models rather than one-off custom fixes. Their goal is to ensure long-term customer success through managed services while actively supporting the veteran community through educational scholarships.
Company Size
11-50
Company Stage
N/A
Total Funding
N/A
Headquarters
Fair Oaks, Virginia
Founded
2016
Get referred to True Zero Technologies
See people who can refer or advise you
Simplify's Take
What believers are saying
- NASA SEWP VI opens three service categories across federal buyers starting July 2026.
- Montana agencies gained a ready procurement path through July 2026 master-contract inclusion.
- Inc. named True Zero a 2026 Best Workplace, helping recruiting in Fairfax.
What critics are saying
- DARPA MANNUS is shared across nine awardees, so task-order revenue stays fragmented.
- Its public story leans heavily on federal vehicles; one procurement loss hits growth immediately.
- Printer-support scope at DARPA narrows differentiation; larger integrators can commoditize the work.
What makes True Zero Technologies unique
- Veteran-owned Fairfax firm built around Splunk-based security and mission-critical technology services.
- Won NASA SEWP VI, DARPA MANNUS, and Montana master-contract access in 2026.
- Ryan Brewer joined September 2026 to scale federal growth, alliances, and executive relationships.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Paid Vacation
- Paid Holidays
- 401(k) Retirement Plan
- 401(k) Company Match
- Phone/Internet Stipend
- Parental Leave