Identity Management Engineer – Architect

True Zero Technologies, LLC

Identity Management Engineer/Architect designing enterprise IAM, PAM, and IGA solutions. Securing access across government, cloud, SaaS, and Zero Trust environments.

Posted 8/14/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing enterprise IAM/ICAM architectures, with a strong focus on identity lifecycle management, access controls, and integration of identity platforms across various environments. Proficient in automating identity management processes and ensuring compliance with government identity standards.

Highest-signal resume keywords

Enterprise IAM / ICAM SolutionsActive Directory and Microsoft Entra IDSAML, OIDC, OAuth, and SCIMPrivileged Access ManagementIdentity Governance and Administration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Lifecycle ManagementRole-Based Access Control (RBAC)Automation with PowerShell, Python, TerraformPIV/CAC and Certificate-Based AuthenticationZero Trust Architecture

Soft Skills

TroubleshootingDocumentationCross-Functional CollaborationGovernance

Tools & Technologies

SailPoint IdentityIQAWS IAM Identity CenterCentralized LoggingIdentity Monitoring

Certifications & Qualifications

AWS Certified Security – SpecialtyMicrosoft Certified: Identity and Access Administrator Associate (SC-300)Microsoft Certified: Cybersecurity Architect Expert (SC-100)CISSPSailPoint IdentityIQ / Identity Security Cloud Certification

Industry Keywords

FICAMGovernment Identity StandardsPrivileged Identity WorkflowsCompliance Evidence CollectionRegulated Environments

Tech Stack

Tools & technologies

AWSCloudCyber SecurityPythonTerraform

About the role

Key responsibilities & impact

Design, implement, and operate enterprise IAM / ICAM architectures supporting on-premises, cloud, SaaS, and hybrid environments
Engineer and maintain directory services, including Active Directory and Microsoft Entra ID
Design and automate user provisioning, deprovisioning, role assignment, access changes, and identity lifecycle management processes
Integrate enterprise applications using SAML, OpenID Connect (OIDC), OAuth, and SCIM
Implement and maintain Privileged Access Management controls for administrative, elevated, and high-risk accounts
Design and operate Identity Governance and Administration capabilities using SailPoint or approved enterprise identity-governance platforms
Integrate and administer AWS IAM Identity Center and related AWS identity and access-management capabilities
Implement PIV/CAC smart-card authentication, certificate-based authentication, and other approved strong-authentication mechanisms
Enforce phishing-resistant multi-factor authentication for privileged and mission-critical access
Align identity architectures, authentication methods, credential lifecycle processes, and access controls with FICAM requirements and applicable government identity standards
Develop and enforce least-privilege, role-based, and policy-based access controls
Automate identity-management processes using scripting, APIs, infrastructure-as-code, and workflow technologies
Integrate PAM, IGA, directory, cloud identity, and authentication platforms
Implement monitoring, logging, auditing, and alerting for authentication events, privileged activity, identity lifecycle changes, and access-policy violations
Perform access reviews, entitlement analysis, privileged-account reviews, and identity-governance activities
Partner with application, cloud, cybersecurity, platform, and DevSecOps teams to onboard applications and services into enterprise identity platforms
Troubleshoot authentication, federation, provisioning, directory synchronization, authorization, and access-management issues
Maintain identity architecture documentation, integration standards, operational procedures, access-control models, and governance processes

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline
Demonstrated experience designing, engineering, or administering enterprise IAM / ICAM solutions
Strong experience with Active Directory and cloud-based directory services such as Microsoft Entra ID
Hands-on experience with SAML, OIDC, OAuth, and SCIM
Experience implementing or operating Privileged Access Management platforms and privileged identity workflows
Experience with Identity Governance and Administration, preferably using SailPoint IdentityIQ or SailPoint Identity Security Cloud
Experience with AWS IAM, AWS IAM Identity Center, and cloud identity integration
Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management
Experience implementing PIV/CAC, certificate-based authentication, and phishing-resistant MFA
Familiarity with FICAM, federal identity standards, and authentication requirements for government environments
Strong understanding of Zero Trust architecture
Experience automating identity workflows using APIs, scripting languages, PowerShell, Python, Terraform, or comparable automation technologies
Experience integrating identity platforms with SaaS applications, cloud services, enterprise applications, and hybrid infrastructure
Experience with centralized logging, identity monitoring, audit reporting, access reviews, and compliance evidence collection
Experience supporting government, defense, GovCloud, or other regulated environments is preferred
Strong architecture, troubleshooting, documentation, governance, and cross-functional collaboration skills
Preferred certifications: AWS Certified Security – Specialty; Microsoft Certified: Identity and Access Administrator Associate (SC-300); Microsoft Certified: Cybersecurity Architect Expert (SC-100); CISSP; SailPoint IdentityIQ / Identity Security Cloud certification; CyberArk Defender or CyberArk Sentry

Benefits

Comp & perks

Competitive salary, paid twice per month
Best in class medical coverage
100% of medical premiums covered by True Zero
Company wide new business incentive programs
Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
3 weeks of PTO starting + 11 Paid Holidays Annually
401k Program with 100% company match on the first 4%
Monthly reimbursement of Cell Phone and Home Internet costs
Paternity/Maternity Leave
Investment in training and certifications to broaden and deepen your technical skills