Identity Management Engineer – Architect

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

True Zero Technologies, LLC

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

True Zero Technologies, LLC is a veteran-owned company specializing in cybersecurity solutions. The company offers a range of services including security engineering and architecture, emerging technology adoption, cyber operations, cyber threat intelligence, penetration testing, and information assurance. True Zero is also recognized for its managed services and cloud security capabilities. The company partners with technology leaders such as Tanium, Splunk, Cribl, and Zscaler to deliver high-impact, high-value solutions that help organizations innovate while enhancing their security and operational programs. True Zero is committed to empowering organizations with actionable insights to secure their IT environments effectively.

📋 Description

• Design, implement, and operate enterprise IAM / ICAM architectures supporting on-premises, cloud, SaaS, and hybrid environments • Engineer and maintain directory services, including Active Directory and Microsoft Entra ID • Design and automate user provisioning, deprovisioning, role assignment, access changes, and identity lifecycle management processes • Integrate enterprise applications using SAML, OpenID Connect (OIDC), OAuth, and SCIM • Implement and maintain Privileged Access Management controls for administrative, elevated, and high-risk accounts • Design and operate Identity Governance and Administration capabilities using SailPoint or approved enterprise identity-governance platforms • Integrate and administer AWS IAM Identity Center and related AWS identity and access-management capabilities • Implement PIV/CAC smart-card authentication, certificate-based authentication, and other approved strong-authentication mechanisms • Enforce phishing-resistant multi-factor authentication for privileged and mission-critical access • Align identity architectures, authentication methods, credential lifecycle processes, and access controls with FICAM requirements and applicable government identity standards • Develop and enforce least-privilege, role-based, and policy-based access controls • Automate identity-management processes using scripting, APIs, infrastructure-as-code, and workflow technologies • Integrate PAM, IGA, directory, cloud identity, and authentication platforms • Implement monitoring, logging, auditing, and alerting for authentication events, privileged activity, identity lifecycle changes, and access-policy violations • Perform access reviews, entitlement analysis, privileged-account reviews, and identity-governance activities • Partner with application, cloud, cybersecurity, platform, and DevSecOps teams to onboard applications and services into enterprise identity platforms • Troubleshoot authentication, federation, provisioning, directory synchronization, authorization, and access-management issues • Maintain identity architecture documentation, integration standards, operational procedures, access-control models, and governance processes

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline • Demonstrated experience designing, engineering, or administering enterprise IAM / ICAM solutions • Strong experience with Active Directory and cloud-based directory services such as Microsoft Entra ID • Hands-on experience with SAML, OIDC, OAuth, and SCIM • Experience implementing or operating Privileged Access Management platforms and privileged identity workflows • Experience with Identity Governance and Administration, preferably using SailPoint IdentityIQ or SailPoint Identity Security Cloud • Experience with AWS IAM, AWS IAM Identity Center, and cloud identity integration • Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management • Experience implementing PIV/CAC, certificate-based authentication, and phishing-resistant MFA • Familiarity with FICAM, federal identity standards, and authentication requirements for government environments • Strong understanding of Zero Trust architecture • Experience automating identity workflows using APIs, scripting languages, PowerShell, Python, Terraform, or comparable automation technologies • Experience integrating identity platforms with SaaS applications, cloud services, enterprise applications, and hybrid infrastructure • Experience with centralized logging, identity monitoring, audit reporting, access reviews, and compliance evidence collection • Experience supporting government, defense, GovCloud, or other regulated environments is preferred • Strong architecture, troubleshooting, documentation, governance, and cross-functional collaboration skills • Preferred certifications: AWS Certified Security – Specialty; Microsoft Certified: Identity and Access Administrator Associate (SC-300); Microsoft Certified: Cybersecurity Architect Expert (SC-100); CISSP; SailPoint IdentityIQ / Identity Security Cloud certification; CyberArk Defender or CyberArk Sentry

🏖️ Benefits

• Competitive salary, paid twice per month • Best in class medical coverage • 100% of medical premiums covered by True Zero • Company wide new business incentive programs • Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.) • 3 weeks of PTO starting + 11 Paid Holidays Annually • 401k Program with 100% company match on the first 4% • Monthly reimbursement of Cell Phone and Home Internet costs • Paternity/Maternity Leave • Investment in training and certifications to broaden and deepen your technical skills