[Hiring] Identity Management Engineer / Architect @True Zero Technologies

Role Description

The Identity Management Engineer / Architect designs, implements, and operates a secure, scalable enterprise identity platform spanning on-premises, cloud, SaaS, and hybrid environments. The role is responsible for:

• Automated identity provisioning and deprovisioning
• Strong authentication
• Least-privilege access
• Modern application federation
• Privileged account management
• Continuous identity governance, monitoring, and auditing

This position is foundational to the Zero Trust identity pillar and ensures that users, administrators, applications, and workloads receive appropriate access based on verified identity, policy, risk, and mission requirements. The engineer/architect will support government and regulated environments through:

• PIV/CAC smart-card authentication
• Phishing-resistant MFA
• FICAM-aligned identity practices
• Privileged-access controls
• Secure integration across enterprise identity platforms

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline
• Demonstrated experience designing, engineering, or administering enterprise IAM / ICAM solutions
• Strong experience with Active Directory and cloud-based directory services such as Microsoft Entra ID
• Hands-on experience with identity federation and provisioning standards including SAML, OIDC, OAuth, and SCIM
• Experience implementing or operating Privileged Access Management platforms and privileged identity workflows
• Experience with Identity Governance and Administration, preferably using SailPoint IdentityIQ or SailPoint Identity Security Cloud
• Experience with AWS IAM, AWS IAM Identity Center, and cloud identity integration
• Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management
• Experience implementing PIV/CAC, certificate-based authentication, and phishing-resistant MFA
• Familiarity with FICAM, federal identity standards, and authentication requirements for government environments
• Strong understanding of Zero Trust architecture, with particular emphasis on identity as a primary policy-enforcement and access-control pillar
• Experience automating identity workflows using APIs, scripting languages, PowerShell, Python, Terraform, or comparable automation technologies
• Experience integrating identity platforms with SaaS applications, cloud services, enterprise applications, and hybrid infrastructure
• Experience with centralized logging, identity monitoring, audit reporting, access reviews, and compliance evidence collection
• Experience supporting government, defense, GovCloud, or other regulated environments is preferred
• Strong architecture, troubleshooting, documentation, governance, and cross-functional collaboration skills

Requirements

• Preferred Certifications:
• AWS Certified Security – Specialty
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Certified Information Systems Security Professional (CISSP)
• SailPoint IdentityIQ / Identity Security Cloud certification
• CyberArk Defender or CyberArk Sentry

Benefits

• Competitive salary, paid twice per month
• Best in class medical coverage
• 100% of medical premiums covered by True Zero
• Company wide new business incentive programs
• Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
• 3 weeks of PTO starting + 11 Paid Holidays Annually
• 401k Program with 100% company match on the first 4%
• Monthly reimbursement of Cell Phone and Home Internet costs
• Paternity/Maternity Leave
• Investment in training and certifications to broaden and deepen your technical skills