RemoteLeaf Logo
Log in Sign up

Identity Management Engineer / Architect (R-00197)

5 hours, 17 minutes ago
Anywhere
Full-time
Senior
Cloud Engineer
DevOps and Infrastructure
Active Directory Cybersecurity DevSecOps OAuth OpenID Connect PowerShell Python SAML Terraform
Apply Now
True Zero Technologies

True Zero Technologies

True Zero Technologies specializes in cybersecurity programs and software solutions, focusing on proactive defense and IT engineering services.

Internet Software & Services
11-50
Founded 2016
View All Jobs 29

Description

  • Design, implement, and operate enterprise IAM/ICAM architectures across on-premises, cloud, SaaS, and hybrid environments.
  • Engineer and maintain directory services such as Active Directory and Microsoft Entra ID.
  • Automate user provisioning, deprovisioning, role assignment, access changes, and identity lifecycle management.
  • Integrate enterprise applications using SAML, OpenID Connect, OAuth, and SCIM.
  • Implement and maintain privileged access management controls for administrative and high-risk accounts.
  • Design and operate identity governance and administration capabilities using SailPoint or an approved platform.
  • Integrate AWS IAM Identity Center and related AWS identity and access management capabilities.
  • Implement PIV/CAC, certificate-based authentication, and phishing-resistant MFA.
  • Enforce least-privilege, role-based, and policy-based access controls.
  • Develop monitoring, logging, auditing, and alerting for identity and access events.
  • Perform access reviews, entitlement analysis, privileged-account reviews, and governance activities.
  • Partner with application, cloud, cybersecurity, platform, and DevSecOps teams to onboard applications securely.
  • Troubleshoot authentication, federation, provisioning, synchronization, authorization, and access-management issues.
  • Maintain identity architecture documentation, integration standards, operational procedures, and governance processes.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
  • Demonstrated experience designing, engineering, or administering enterprise IAM/ICAM solutions.
  • Strong experience with Active Directory and cloud directory services such as Microsoft Entra ID.
  • Hands-on experience with SAML, OIDC, OAuth, and SCIM.
  • Experience implementing or operating Privileged Access Management platforms and workflows.
  • Experience with Identity Governance and Administration, preferably SailPoint IdentityIQ or SailPoint Identity Security Cloud.
  • Experience with AWS IAM, AWS IAM Identity Center, and cloud identity integration.
  • Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management.
  • Experience implementing PIV/CAC, certificate-based authentication, and phishing-resistant MFA.
  • Familiarity with FICAM, federal identity standards, and government authentication requirements.
  • Strong understanding of Zero Trust architecture and identity as a policy-enforcement pillar.
  • Experience automating identity workflows using APIs, scripting, PowerShell, Python, Terraform, or similar tools.
  • Experience integrating identity platforms with SaaS, cloud, enterprise, and hybrid systems.
  • Experience with centralized logging, identity monitoring, audit reporting, access reviews, and compliance evidence collection.
  • Experience supporting government, defense, GovCloud, or other regulated environments is preferred.
  • Preferred certifications include AWS Certified Security – Specialty, SC-300, SC-100, CISSP, SailPoint certification, and CyberArk Defender or Sentry.

Benefits

  • Competitive salary paid twice per month.
  • Best-in-class medical coverage with 100% of medical premiums covered by True Zero.
  • Company-wide new business incentive programs.
  • Contribution incentives for white papers, blog posts, and internal webinars.
  • 3 weeks of PTO starting plus 11 paid holidays annually.
  • 401(k) program with 100% company match on the first 4%.
  • Monthly reimbursement for cell phone and home internet costs.
  • Paternity/maternity leave.
  • Investment in training and certifications.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Unlimited Technology

Lead Traveling Security Technician

Unlimited Technology 51-250 Professional Services

Unlimited Technology is hiring a Traveling Security Technician for UT Government to install, service, test, and inspect access control and IP camera systems for customers across the U.S.

United States Full-time Lead Security Engineer
$65k-$90k
5 hours, 17 minutes ago
Chainguard

Staff Vulnerability Management Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a Staff Vulnerability Management Engineer to lead its AI-driven open source vulnerability disclosure and coordination efforts across internal teams, maintainers, and industry stakeholders.

United States Full-time Lead Security Engineer
$170k-$231k
Go Java JavaScript Penetration Testing Python
5 hours, 17 minutes ago
Chainguard

Staff Vulnerability Management Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a Staff Vulnerability Management Engineer to lead its AI-era open source vulnerability disclosure and coordination efforts across internal teams, customers, maintainers, and industry bodies.

Canada Full-time Lead Security Engineer
Go Java JavaScript Penetration Testing Python
5 hours, 17 minutes ago
CI&T

[Job - 31023] Security Triage & Remediation Lead, Brazil

CI&T 5K-10K Internet Software & Services

CI&T is hiring a Security Triage & Remediation Lead to run enterprise vulnerability triage and remediation for a large U.S. mortgage lender, prioritizing fixes and coordinating secure closure across teams and stakeholders.

Brazil Full-time Lead Security Engineer
AWS HashiCorp Vault PHP
5 hours, 32 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers