Identity Access Management (IAM) Architect

Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret Clearance Level Must Be Able to Obtain: Top Secret Public Trust/Other Required: None Job Family: IT Infrastructure and Operations Job Qualifications: Skills: Authentication Methods, Cybersecurity, Enterprise IT Certifications: None Experience: 10 + years of related experience US Citizenship Required: Yes Job Description: The Identity Access Management (IAM) Architect will lead the technical design and implementation of large‑scale, global identity access management services supporting the U.S. Department of State’s Bureau of Diplomatic Technologies (DT) . This role oversees 24x7 worldwide technical operations, modernization activities, ZTA adoption and compliance, security integration, service management, and customer engagement across all geographic regions. WHAT YOU’LL DO: Collaborate with DT and Program Director on defining outputs, outcomes, and adoption framework for project creation and implementation Leading team providing steady-state support for current environment IAM implementation, preparing for a modernization journey Define and evolve the enterprise architecture, strategy, and roadmap for IAM capabilities, aligning solutions with business, technology, and cybersecurity objectives, including proper management of non-human identities to securely support AI-implementation. Design secure, scalable, and automated and AI-augmented solutions for managing service accounts, machine identities, secrets, certificates, APIs, and other identity platforms or use cases. Establish governance frameworks, lifecycle controls, and operational standards that identities are securely created, monitored, maintained, and decommissioned. Develop architecture artifacts, implementation guidance, metrics, and reporting that promote consistency, automation, resiliency, and operational excellence. Serve a trusted advisor, technical leader, and mentor across the program, collaborating with other senior technical leaders and mid- to junior-career staff REQUIRED QUALIFICATIONS: Active TS/SCI clearance Bachelor’s Degree in a related technical discipline Minimum of 10 years’ technical experience Experience working within a government enterprise environment Deep understanding of and previous experience with Zero Trust Architecture, NIST frameworks, and other government standards and compliance frameworks. Deep understanding of and previous experience with Active Directory and Microsoft Entra, including leading cloud-focused, ZTA centered modernization efforts Deep understanding of and previous experience with providing DNS, TCP/IP, PKI, ADFS, and other services from Active Directory, including collaborating with technical leaders to lead cloud-focused, ZTA centered modernization efforts Previous experience with identity solutions such as Okta, Ping, CyberArk, and other industry leaders Previous experience with Microsoft Azure, Amazon Web Services (AWS), and/or Google Cloud Platform (GCP), primarily implementing modern, secure authentication and access management strategies for cloud hosted applications Experience integrating workflows and automation solutions with ITSM platforms such as ServiceNow Microsoft Identity and access Administrator Associate (SC-300) PREFERRED QUALIFICATIONS : Experience working within a government enterprise environment One or more of the following Microsoft certifications: Microsoft Administrator Expert (MS-102), Microsoft Endpoint Administrator (MD-102), Microsoft Cybersecurity Architect Expert (SC-100), Microsoft Azure Administrator Associate (AZ-104), Microsoft Solutions Architect Expert (AZ-305), Microsoft AI-centric professional certifications or Applied Skills CISSP Technical certifications from other industry leaders in the IAM segment Project Management Professional (PMP) GDIT IS YOUR PLACE At GDIT, the mission is our purpose, and our people are at the center of everything we do. ● Growth: AI-powered career tool that identifies career steps and learning opportunities ● Support: An internal mobility team focused on helping you achieve your career goals ● Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off ● Community: Award-winning culture of innovation and a military-friendly workplace OWN YOUR OPPORTUNITY Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward. The likely salary range for this position is $169,604 - $229,464. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: Less than 10% T elecommuting Options: Onsite Work Location: USA DC Washington Additional Work Locations: Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes. About Our Work: We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at . Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans