Identity Access Management; IAM) Architect

Type of

Requisition :
Regular Clearance Level Must Currently Possess:
Top Secret Clearance Level Must Be Able to Obtain:
Top Secret Public Trust/Other

Required:

None Job Family: IT Infrastructure and Operations

Job Qualifications:

Skills:

Authentication Methods, Cybersecurity, Enterprise IT

Certifications:

None

Experience:

10 + years of related experience US Citizenship

Required:

Yes

Job Description:

The Identity Access Management (IAM) Architect will lead the technical design and implementation of large-scale, global identity access management services supporting the U.S. Department of State's Bureau of Diplomatic Technologies (DT). This role oversees 24x7 worldwide technical operations, modernization activities, ZTA adoption and compliance, security integration, service management, and customer engagement across all geographic regions.

• Collaborate with DT and Program Director on defining outputs, outcomes, and adoption framework for project creation and implementation
• Leading team providing steady-state support for current environment IAM implementation, preparing for a modernization journey
• Define and evolve the enterprise architecture, strategy, and roadmap for IAM capabilities, aligning solutions with business, technology, and cybersecurity objectives, including proper management of non-human identities to securely support AI-implementation.
• Design secure, scalable, and automated and AI-augmented solutions for managing service accounts, machine identities, secrets, certificates, APIs, and other identity platforms or use cases.
• Establish governance frameworks, lifecycle controls, and operational standards that identities are securely created, monitored, maintained, and decommissioned.
• Develop architecture artifacts, implementation guidance, metrics, and reporting that promote consistency, automation, resiliency, and operational excellence.
• Serve a trusted advisor, technical leader, and mentor across the program, collaborating with other senior technical leaders and mid- to junior-career staff

• Active TS/SCI clearance
• Bachelor’s Degree in a related technical discipline
• Minimum of 10 years’ technical experience
• Experience working within a government enterprise environment
• Deep understanding of and previous experience with Zero Trust Architecture, NIST frameworks, and other government standards and compliance frameworks.
• Deep understanding of and previous experience with Active Directory and Microsoft Entra, including leading cloud-focused, ZTA centered modernization efforts
• Deep understanding of and previous experience with providing DNS, TCP/IP, PKI, ADFS, and other services from Active Directory, including collaborating with technical leaders to lead cloud-focused, ZTA centered modernization efforts
• Previous experience with identity solutions such as Okta, Ping, Cyber Ark, and other industry leaders
• Previous experience with Microsoft Azure, Amazon Web Services (AWS), and/or Google Cloud Platform (GCP), primarily implementing modern, secure authentication and access management strategies for cloud hosted applications
• Experience integrating workflows and automation solutions with ITSM platforms such as Service Now Microsoft Identity and access Administrator Associate (SC-300)

• Experience working within a government enterprise environment
• One or more of the following Microsoft certifications:
  Microsoft Administrator Expert (MS-102), Microsoft Endpoint Administrator (MD-102), Microsoft Cybersecurity Architect Expert (SC-100), Microsoft Azure Administrator Associate (AZ-104), Microsoft Solutions Architect Expert (AZ-305), Microsoft AI-centric professional certifications or Applied Skills CISSP Technical certifications from other industry leaders in the…