RemoteLeaf Logo
Log in Sign up

Identity Management Engineer / Architect (R-00197)

3 weeks, 6 days ago
Anywhere
Full-time
Senior
Cloud Engineer
DevOps and Infrastructure
Active Directory Cybersecurity DevSecOps OAuth OpenID Connect PowerShell Python SAML Terraform
Apply Now
True Zero Technologies

True Zero Technologies

True Zero Technologies specializes in cybersecurity programs and software solutions, focusing on proactive defense and IT engineering services.

Internet Software & Services
11-50
Founded 2016
View All Jobs 30

Description

  • Design, implement, and operate enterprise IAM/ICAM architectures across on-premises, cloud, SaaS, and hybrid environments.
  • Engineer and maintain directory services such as Active Directory and Microsoft Entra ID.
  • Automate user provisioning, deprovisioning, role assignment, access changes, and identity lifecycle management.
  • Integrate enterprise applications using SAML, OpenID Connect, OAuth, and SCIM.
  • Implement and maintain privileged access management controls for administrative and high-risk accounts.
  • Design and operate identity governance and administration capabilities using SailPoint or an approved platform.
  • Integrate AWS IAM Identity Center and related AWS identity and access management capabilities.
  • Implement PIV/CAC, certificate-based authentication, and phishing-resistant MFA.
  • Enforce least-privilege, role-based, and policy-based access controls.
  • Develop monitoring, logging, auditing, and alerting for identity and access events.
  • Perform access reviews, entitlement analysis, privileged-account reviews, and governance activities.
  • Partner with application, cloud, cybersecurity, platform, and DevSecOps teams to onboard applications securely.
  • Troubleshoot authentication, federation, provisioning, synchronization, authorization, and access-management issues.
  • Maintain identity architecture documentation, integration standards, operational procedures, and governance processes.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
  • Demonstrated experience designing, engineering, or administering enterprise IAM/ICAM solutions.
  • Strong experience with Active Directory and cloud directory services such as Microsoft Entra ID.
  • Hands-on experience with SAML, OIDC, OAuth, and SCIM.
  • Experience implementing or operating Privileged Access Management platforms and workflows.
  • Experience with Identity Governance and Administration, preferably SailPoint IdentityIQ or SailPoint Identity Security Cloud.
  • Experience with AWS IAM, AWS IAM Identity Center, and cloud identity integration.
  • Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, and identity lifecycle management.
  • Experience implementing PIV/CAC, certificate-based authentication, and phishing-resistant MFA.
  • Familiarity with FICAM, federal identity standards, and government authentication requirements.
  • Strong understanding of Zero Trust architecture and identity as a policy-enforcement pillar.
  • Experience automating identity workflows using APIs, scripting, PowerShell, Python, Terraform, or similar tools.
  • Experience integrating identity platforms with SaaS, cloud, enterprise, and hybrid systems.
  • Experience with centralized logging, identity monitoring, audit reporting, access reviews, and compliance evidence collection.
  • Experience supporting government, defense, GovCloud, or other regulated environments is preferred.
  • Preferred certifications include AWS Certified Security – Specialty, SC-300, SC-100, CISSP, SailPoint certification, and CyberArk Defender or Sentry.

Benefits

  • Competitive salary paid twice per month.
  • Best-in-class medical coverage with 100% of medical premiums covered by True Zero.
  • Company-wide new business incentive programs.
  • Contribution incentives for white papers, blog posts, and internal webinars.
  • 3 weeks of PTO starting plus 11 paid holidays annually.
  • 401(k) program with 100% company match on the first 4%.
  • Monthly reimbursement for cell phone and home internet costs.
  • Paternity/maternity leave.
  • Investment in training and certifications.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

SpotMe

Security Operations Engineer (Europe - Remote)

SpotMe 51-250 Professional Services

SpotMe is hiring a Security Operations Engineer to strengthen security across its identity systems, macOS fleet, SaaS tools, and internal telemetry supporting its B2B event and healthcare engagement platforms.

Europe Full-time Mid Level Security Engineer
HTTP macOS REST API SAML
14 hours, 45 minutes ago
AssemblyAI

Security Operations Engineer

AssemblyAI 51-250 Media

AssemblyAI is hiring a Security Operations Engineer to run and strengthen the security operations and GRC program protecting its Voice AI infrastructure, products, and customer data.

United States Full-time Mid Level Security Engineer
$180k-$220k
AWS Python SIEM Terraform
15 hours ago
Tines

Senior Security Operations Engineer

Tines 51-250 Construction & Engineering

Tines is hiring a Senior Security Operations Engineer to mature its security program by building scalable detection, response, vulnerability management, and automation capabilities across cloud and corporate environments.

United States Full-time Senior Security Engineer
$160k-$180k
AWS Azure Docker Go Kubernetes Linux macOS Python
15 hours, 15 minutes ago
Lingaro

Data Engineer GCP Mexico

Lingaro 5K-10K IT Services

Data Engineer responsible for designing, building, and deploying cloud-based data infrastructure and pipelines on GCP to support reliable data integration, transformation, and analysis.

Mexico Full-time Mid Level Cloud Engineer Data Engineer
Apache Airflow Apache Spark Azure Confluence Databricks dbt GCP Git JIRA Looker Power BI Python SQL Tableau
15 hours, 15 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers