Pillar Lead: Indentity Architect (R-00210)

This role bridges security engineering and day to day operations by supporting implementation of security capabilities, evaluating technical solutions, maintaining cybersecurity tools, and helping operational teams translate security architecture into effective, repeatable practices. The Cybersecurity Engineer works closely with vulnerability management, incident response, RMF, and ISSO teams to ensure engineering activities directly support operational risk reduction and continuous improvement.

Position Responsibilities

• Develop identity-centric architecture patterns for enterprise Zero Trust Use Cases.
• Define authentication, authorization, federation, identity proofing, privileged access, conditional access, and lifecycle integration requirements.
• Map identity signals to policy decision and enforcement points across applications, networks, devices, and workloads.
• Assess existing identity technologies for interoperability, consolidation opportunities, and alignment to target-state Zero Trust capabilities.
• Support system implementation plans, pilots, testing, validation, and architecture reviews.
• Document identity dependencies, deviations, risks, and lessons learned for reuse across future implementation waves.

Job Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field.
• Seven or more years of identity and access management architecture or engineering experience.
• Deep knowledge of federation, SSO, MFA, conditional access, PKI, PAM, identity governance, and modern authentication protocols.
• Strong understanding of Zero Trust identity principles and policy-based access control.
• Experience integrating identity services across cloud, hybrid, and legacy environments.
Preferred Qualifications:
• Experience with Microsoft Entra ID, Active Directory, PIV/CAC, PAM, IGA, or comparable enterprise identity platforms.
• Experience supporting Federal identity requirements.
• Experience with workload identity and machine-to-machine authentication patterns.
Preferred Certifications: One or more of the following is preferred:
• CISSP
• Microsoft Identity and Access Administrator
• Okta certification
• Security+