ResponsibilitiesUberEther is seeking a skilled and motivated Federation Architect to join our growing Identity and Access Management team. In this role, you will be responsible for the design, implementation, configuration, and support of identity federation solutions across federal and enterprise environments. You will work closely with engineering teams, customers, and stakeholders to ensure secure and seamless identity federation across complex, multi-domain environments.
- Provide implementation architectures, artifacts, and documentation of for customers of UberEther
- Design, implement, and maintain identity federation solutions using industry-standard protocols including SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC)
- Configure and manage federation services across Identity Providers (IdPs) and Service Providers (SPs)
- Support the integration of enterprise applications with federated identity platforms
- Troubleshoot and resolve federation-related issues, including SSO failures, certificate management, and token validation errors
- Collaborate with IAM engineers and architects to develop and refine federation standards, policies, and best practices
- Assist in the development and maintenance of technical documentation including architecture diagrams, runbooks, and standard operating procedures
- Participate in security assessments, audits, and compliance reviews related to federation and authentication
- Support onboarding of new service providers and identity providers into the federation ecosystem
- Monitor federation infrastructure and respond to incidents in a timely manner
- Stay current with emerging trends and threats in identity federation and authentication technologies
Qualifications- U.S. Citizenship required
- Secret Clearance required / Top Secret Clearance Preferred
- 5+ years of experience in Identity and Access Management or a related field
- Hands-on experience with federation protocols including SAML 2.0, OAuth 2.0, and OIDC
- Experience with one or more IAM/federation platforms such as PingFederate, Okta, Azure AD, Shibboleth, or similar and how they contribute to a best practice security implementation
- Solid understanding of PKI, digital certificates, and token-based authentication
- Strong analytical and troubleshooting skills
- Excellent written and verbal communication skills
Preferred Qualifications
- Experience working in a federal government or DoD environment
- Familiarity with FedRAMP, FISMA, or NIST 800-63 guidelines
- Experience with Radiant Logic, SailPoint, CyberArk, or Delinea
- Relevant certifications such as CompTIA Security+, CISSP, or vendor-specific IAM certifications
- Experience with directory services such as Active Directory or LDAP
Location
This role is offered as a hybrid position requiring three days per week onsite in Alexandria, VA.
Salary
The base salary range for this position is between $155,000-$165,000 and varies based on experience.
Benefits
We understand the value of such people, reward them accordingly, and provide best-in-class benefits to support them and their family's well-being. Full-time employees are eligible to receive top-notch Medical, Dental, Vision, 401K savings plan, Life Insurance, and Short and Long-term Disability benefits as well as generous paid flex-time, education and technology reimbursement. This includes:
- 100% employer covered health care premiums
- 6% 401k match
- Substantial education and professional development budget
- 25 PTO days per year, which increases with tenure