IAM Architect (Identity Resolution)

Location: Fully remote within the United States

Salary: $155,000–$175,000 annually

Company

hirify.global delivers IT services and solutions that transform how government agencies operate and serve citizens.

What you will do

• Architect and lead enterprise identity resolution and person-matching capabilities that create authoritative, deduplicated identity records across mission, HR, credentialing, and partner data stores.
• Design deterministic and probabilistic record-linkage strategies using fuzzy matching, weighted attribute scoring, and machine-learning-assisted matching.
• Own the architecture and lifecycle of a Master Person Index or Enterprise Identity Index, including match and merge rules, survivorship logic, and false-positive/false-negative tuning.
• Architect identity lifecycle management, provisioning and de-provisioning workflows, privileged access controls, Zero Trust identity principles, federation, directory services, authentication, and SSO.
• Define data-quality, privacy, governance, audit, and traceability requirements; create architecture diagrams, data flows, matching documentation, and compliance artifacts.
• Mentor IAM Engineers, provide technical escalation support and code reviews, and conduct root-cause analysis of duplicate identities, mismatches, orphaned records, and data-pipeline issues.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, or a related field, plus 15 years of engineering or architecture experience, or a commensurate combination of education and experience.
• At least 12 years of identity and access management engineering or architecture experience.
• At least 8 years of cybersecurity experience, including 5 years dedicated to IAM Architecture in large-scale environments.
• Hands-on enterprise-scale experience designing and implementing person identity matching or identity-resolution capabilities, including deterministic and probabilistic record linkage.
• Deep understanding of SAML, OAuth 2.0, OIDC, SCIM, and Active Directory/LDAP architecture.
• Working knowledge of NIST SP 800-63A/B/C Digital Identity Guidelines and NIST SP 800-207 Zero Trust Architecture.
• One or more of CISSP, Security+ CE, CASP+, or vendor-specific identity certifications.
• Must be able to obtain and maintain a suitability/public trust clearance.

Nice to have

• Experience with entity resolution or Master Person Index implementations.
• Experience with SailPoint, Okta, Microsoft Entra ID, Ping Identity, or DigiCert.
• Experience supporting federal identity-management or person-matching programs.
• Knowledge of data-governance frameworks and data-level access controls for identity and ICAM solutions.
• Advanced knowledge of RESTful API authorization protocols and secure data-exchange gateways.
• Master’s degree in a related technical field.

Culture & Benefits

• Fully remote work environment and collaborative government IT work.
• Employee Assistance Program, corporate discounts, pet insurance, and flexible work environment.
• Learning and Development platform with certification preparation content.
• Training, education, and certification assistance available to full-time employees.
• Referral Bonus Program and Internal Mobility Program.
• The position is contingent upon contract award and remains unfunded until the contract is awarded.

Hiring process

• Virtual video interview with the hiring manager and/or team; the camera must be on and a valid photo ID must be presented during each interview.
• Selected candidates complete enhanced biometric ID verification and a background check covering criminal history, highest education, and employment history for the past seven years.