Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 49 days ago

Identity Management Engineer / Architect (R-00197)

truezerotech33 open roles

Where
100% Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIdentity Management Engineer / Architect (R-00197)truezerotech · 100% Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on truezerotech's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.6%1 day
  2. 3.4%3 days
  3. 7.8%7 days
  4. 14.3%14 days
  5. 33.7%30 days
This job: posted 49 days ago

The posting

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

The Identity Management Engineer / Architect designs, implements, and operates a secure, scalable enterprise identity platform spanning on-premises, cloud, SaaS, and hybrid environments. The role is responsible for automated identity provisioning and deprovisioning, strong authentication, least-privilege access, modern application federation, privileged account management, and continuous identity governance, monitoring, and auditing.

This position is foundational to the Zero Trust identity pillar and ensures that users, administrators, applications, and workloads receive appropriate access based on verified identity, policy, risk, and mission requirements. The engineer/architect will support government and regulated environments through PIV/CAC smart-card authentication, phishing-resistant MFA, FICAM-aligned identity practices, privileged-access controls, and secure integration across enterprise identity platforms.

Job Responsibilities

  • Design, implement, and operate enterprise IAM / ICAM architectures supporting on-premises, cloud, SaaS, and hybrid environments.
  • Engineer and maintain directory services, including Active Directory and Microsoft Entra ID where included in the approved architecture.
  • Design and automate user provisioning, deprovisioning, role assignment, access changes, and identity lifecycle management processes.
  • Integrate enterprise applications using modern identity and federation standards including SAML, OpenID Connect (OIDC), OAuth, and SCIM.
  • Implement and maintain Privileged Access Management (PAM) controls for administrative, elevated, and high-risk accounts.
  • Design and operate Identity Governance and Administration (IGA) capabilities using SailPoint or approved enterprise identity-governance platforms.
  • Integrate and administer AWS IAM Identity Center and related AWS identity and access-management capabilities.
  • Implement PIV/CAC smart-card authentication, certificate-based authentication, and other approved strong-authentication mechanisms.
  • Enforce phishing-resistant multi-factor authentication for privileged and mission-critical access.
  • Align identity architectures, authentication methods, credential lifecycle processes, and access controls with FICAMrequirements and applicable government identity standards.
  • Develop and enforce least-privilege, role-based, and policy-based access controls across enterprise systems and applications.
  • Automate identity-management processes using scripting, APIs, infrastructure-as-code, and workflow technologies.
  • Integrate PAM, IGA, directory, cloud identity, and authentication platforms to provide consistent identity controls across environments.
  • Implement monitoring, logging, auditing, and alerting for authentication events, privileged activity, identity lifecycle changes, and access-policy violations.
  • Perform periodic access reviews, entitlement analysis, privileged-account reviews, and identity-governance activities.
  • Partner with application, cloud, cybersecurity, platform, and DevSecOps teams to securely onboard applications and services into enterprise identity platforms.
  • Troubleshoot complex authentication, federation, provisioning, directory synchronization, authorization, and access-management issues.
  • Maintain identity architecture documentation, integration standards, operational procedures, access-control models, and governance processes.

Job Qualifications

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
  • Demonstrated experience designing, engineering, or administering enterprise IAM / ICAM solutions.
  • Strong experience with Active Directory and cloud-based directory services such as Microsoft Entra ID.
  • Hands-on experience with identity federation and provisioning standards including SAML, OIDC, OAuth, and SCIM.
  • Experience implementing or operating Privileged Access Management platforms and privileged identity workflows.
  • Experience with Identity Governance and Administration, preferably using SailPoint IdentityIQ or SailPoint Identity Security Cloud.
  • Experience with AWS IAM, AWS IAM Identity Center, and cloud identity integration.
  • Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management.
  • Experience implementing PIV/CAC, certificate-based authentication, and phishing-resistant MFA.
  • Familiarity with FICAM, federal identity standards, and authentication requirements for government environments.
  • Strong understanding of Zero Trust architecture, with particular emphasis on identity as a primary policy-enforcement and access-control pillar.
  • Experience automating identity workflows using APIs, scripting languages, PowerShell, Python, Terraform, or comparable automation technologies.
  • Experience integrating identity platforms with SaaS applications, cloud services, enterprise applications, and hybrid infrastructure.
  • Experience with centralized logging, identity monitoring, audit reporting, access reviews, and compliance evidence collection.
  • Experience supporting government, defense, GovCloud, or other regulated environments is preferred.
  • Strong architecture, troubleshooting, documentation, governance, and cross-functional collaboration skills.
  • AWS Certified Security – Specialty
  • Microsoft Certified: Identity and Access Administrator Associate (SC-300)
  • Microsoft Certified: Cybersecurity Architect Expert (SC-100)
  • Certified Information Systems Security Professional (CISSP)
  • SailPoint IdentityIQ / Identity Security Cloud certification
  • CyberArk Defender or CyberArk Sentry

We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:

- Competitive salary, paid twice per month

- Best in class medical coverage

- 100% of medical premiums covered by True Zero

- Company wide new business incentive programs

- Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)

- 3 weeks of PTO starting + 11 Paid Holidays Annually

- 401k Program with 100% company match on the first 4%

- Monthly reimbursement of Cell Phone and Home Internet costs

- Paternity/Maternity Leave

- Investment in training and certifications to broaden and deepen your technical skills

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against truezerotech's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on truezerotech's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    truezerotech's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.