{"id":341610,"url":"https://alion.io/job/true-zero-technologies-identity-management-engineer-architect-r-00197","title":"Identity Management Engineer / Architect (R-00197)","company":{"id":8178,"name":"True Zero Technologies","domain":"truezerotech.com","url":"https://alion.io/company/true-zero-technologies","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":87,"open_postings":3,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":154,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":108000,"max_usd":219000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":91},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Sentry","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-14T18:58:15Z","employer_posted_date":"2026-08-14","last_verified_at":"2026-10-22T07:56:38Z","board_verified":true,"closed_at":null,"days_open":68,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":68},"description":"True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM-$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.\nThe Identity Management Engineer / Architect designs, implements, and operates a secure, scalable enterprise identity platform spanning on-premises, cloud, SaaS, and hybrid environments. The role is responsible for automated identity provisioning and deprovisioning, strong authentication, least-privilege access, modern application federation, privileged account management, and continuous identity governance, monitoring, and auditing.\nThis position is foundational to the Zero Trust identity pillar and ensures that users, administrators, applications, and workloads receive appropriate access based on verified identity, policy, risk, and mission requirements. The engineer/architect will support government and regulated environments through PIV/CAC smart-card authentication, phishing-resistant MFA, FICAM-aligned identity practices, privileged-access controls, and secure integration across enterprise identity platforms.\nJob Responsibilities\nDesign, implement, and operate enterprise IAM / ICAM architectures supporting on-premises, cloud, SaaS, and hybrid environments.\nEngineer and maintain directory services, including Active Directory and Microsoft Entra ID where included in the approved architecture.\nDesign and automate user provisioning, deprovisioning, role assignment, access changes, and identity lifecycle management processes.\nIntegrate enterprise applications using modern identity and federation standards including SAML, OpenID Connect (OIDC), OAuth, and SCIM.\nImplement and maintain Privileged Access Management (PAM) controls for administrative, elevated, and high-risk accounts.\nDesign and operate Identity Governance and Administration (IGA) capabilities using SailPoint or approved enterprise identity-governance platforms.\nIntegrate and administer AWS IAM Identity Center and related AWS identity and access-management capabilities.\nImplement PIV/CAC smart-card authentication, certificate-based authentication, and other approved strong-authentication mechanisms.\nEnforce phishing-resistant multi-factor authentication for privileged and mission-critical access.\nAlign identity architectures, authentication methods, credential lifecycle processes, and access controls with FICAMrequirements and applicable government identity standards.\nDevelop and enforce least-privilege, role-based, and policy-based access controls across enterprise systems and applications.\nAutomate identity-management processes using scripting, APIs, infrastructure-as-code, and workflow technologies.\nIntegrate PAM, IGA, directory, cloud identity, and authentication platforms to provide consistent identity controls across environments.\nImplement monitoring, logging, auditing, and alerting for authentication events, privileged activity, identity lifecycle changes, and access-policy violations.\nPerform periodic access reviews, entitlement analysis, privileged-account reviews, and identity-governance activities.\nPartner with application, cloud, cybersecurity, platform, and DevSecOps teams to securely onboard applications and services into enterprise identity platforms.\nTroubleshoot complex authentication, federation, provisioning, directory synchronization, authorization, and access-management issues.\nMaintain identity architecture documentation, integration standards, operational procedures, access-control models, and governance processes.\nJob Qualifications\nBachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.\nDemonstrated experience designing, engineering, or administering enterprise IAM / ICAM solutions.\nStrong experience with Active Directory and cloud-based directory services such as Microsoft Entra ID.\nHands-on experience with identity federation and provisioning standards including SAML, OIDC, OAuth, and SCIM.\nExperience implementing or operating Privileged Access Management platforms and privileged identity workflows.\nExperience with Identity Governance and Administration, preferably using SailPoint IdentityIQ or SailPoint Identity Security Cloud.\nExperience with AWS IAM, AWS IAM Identity Center, and cloud identity integration.\nStrong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management.\nExperience implementing PIV/CAC, certificate-based authentication, and phishing-resistant MFA.\nFamiliarity with FICAM, federal identity standards, and authentication requirements for government environments.\nStrong understanding of Zero Trust architecture, with particular emphasis on identity as a primary policy-enforcement and access-control pillar.\nExperience automating identity workflows using APIs, scripting languages, PowerShell, Python, Terraform, or comparable automation technologies.\nExperience integrating identity platforms with SaaS applications, cloud services, enterprise applications, and hybrid infrastructure.\nExperience with centralized logging, identity monitoring, audit reporting, access reviews, and compliance evidence collection.\nExperience supporting government, defense, GovCloud, or other regulated environments is preferred.\nStrong architecture, troubleshooting, documentation, governance, and cross-functional collaboration skills.\nPreferred Certifications:\nAWS Certified Security - Specialty\nMicrosoft Certified: Identity and Access Administrator Associate (SC-300)\nMicrosoft Certified: Cybersecurity Architect Expert (SC-100)\nCertified Information Systems Security Professional (CISSP)\nSailPoint IdentityIQ / Identity Security Cloud certification\nCyberArk Defender or CyberArk Sentry","description_format":"text","description_chars":6620,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Penetration Testing","Information Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-09-05T18:07:56Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.881,"p_room":0.72,"age_days":68,"expected_fill_days":154,"reasons":["conf:1","velocity","win:mid","crowd:"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/true-zero-technologies-identity-management-engineer-architect-r-00197","json_url":"https://alion.io/job/true-zero-technologies-identity-management-engineer-architect-r-00197.json","meta":{"generated_at":"2026-10-22T09:27:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6278,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8178},"rest":"https://alion.io/mcp/rest/get_company?id=8178"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrue-zero-technologies-identity-management-engineer-architect-r-00197"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrue-zero-technologies-identity-management-engineer-architect-r-00197"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrue-zero-technologies-identity-management-engineer-architect-r-00197"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/true-zero-technologies-identity-management-engineer-architect-r-00197\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrue-zero-technologies-identity-management-engineer-architect-r-00197"}]}