Identity Management Engineer / Architect (R-00197)

True Zero Technologies , a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025 , a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence. The Identity Management Engineer / Architect designs, implements, and operates a secure, scalable enterprise identity platform spanning on-premises, cloud, SaaS, and hybrid environments. The role is responsible for automated identity provisioning and deprovisioning, strong authentication, least-privilege access, modern application federation, privileged account management, and continuous identity governance, monitoring, and auditing. This position is foundational to the Zero Trust identity pillar and ensures that users, administrators, applications, and workloads receive appropriate access based on verified identity, policy, risk, and mission requirements. The engineer/architect will support government and regulated environments through PIV/CAC smart-card authentication, phishing-resistant MFA, FICAM-aligned identity practices, privileged-access controls, and secure integration across enterprise identity platforms. Job Responsibilities - Design, implement, and operate enterprise IAM / ICAM architectures supporting on-premises, cloud, SaaS, and hybrid environments. - Engineer and maintain directory services, including Active Directory and Microsoft Entra ID where included in the approved architecture. - Design and automate user provisioning, deprovisioning, role assignment, access changes, and identity lifecycle management processes. - Integrate enterprise applications using modern identity and federation standards including SAML, OpenID Connect (OIDC), OAuth, and SCIM. - Implement and maintain Privileged Access Management (PAM) controls for administrative, elevated, and high-risk accounts. - Design and operate Identity Governance and Administration (IGA) capabilities using SailPoint or approved enterprise identity-governance platforms. - Integrate and administer AWS IAM Identity Center and related AWS identity and access-management capabilities. - Implement PIV/CAC smart-card authentication, certificate-based authentication, and other approved strong-authentication mechanisms. - Enforce phishing-resistant multi-factor authentication for privileged and mission-critical access. - Align identity architectures, authentication methods, credential lifecycle processes, and access controls with FICAMrequirements and applicable government identity standards. - Develop and enforce least-privilege, role-based, and policy-based access controls across enterprise systems and applications. - Automate identity-management processes using scripting, APIs, infrastructure-as-code, and workflow technologies. - Integrate PAM, IGA, directory, cloud identity, and authentication platforms to provide consistent identity controls across environments. - Implement monitoring, logging, auditing, and alerting for authentication events, privileged activity, identity lifecycle changes, and access-policy violations. - Perform periodic access reviews, entitlement analysis, privileged-account reviews, and identity-governance acti