Responsibilities:
• Design the target architecture for the identity gateway, digital wallet and entity resolution, and deliver a working pilot with a scale-out roadmap
• Build business entity resolution across agency datasets (FEIN, legal name, DBA, address) with match-quality metrics
• Implement credential issuance and verification (W3C VC/DID, OID4VCI/OID4VP, SD-JWT), including how authorized representatives act for a business
• Define keyed hashing and key management in Azure Key Vault, with privacy-by-design controls: selective disclosure, data minimization and no tracking of credential use
• Integrate with Microsoft Entra ID and agency identity providers, document the design and run knowledge transfer
Must Have:
• Skills field: Azure, Data Architecture, Entity Resolution, Master Data Management, Record Linkage, Verifiable Credentials, OID4VC, SD-JWT, Decentralized Identifiers, Microsoft Entra ID, OAuth 2.0, OpenID Connect, Azure Key Vault, Cryptography, Databricks, Python, SQL
• 6+ years in data engineering or data architecture, including 3+ years on Azure (ADLS, Databricks or Fabric)
• Hands-on entity resolution, master data management or record linkage across organizations
• Strong data modeling, SQL and Python, with secure pipelines and APIs for sensitive data
• Microsoft Entra ID, OAuth 2.0 and OpenID Connect
• Hands-on verifiable credentials: OID4VCI/OID4VP or SD-JWT
• Applied cryptography: hashing and HMAC, Azure Key Vault or HSM, key rotation
Nice to have:
• Business registry, vendor master or know-your-business (KYB) data
• Government digital identity or mobile driver's license (ISO 18013-5/-7) programs
• NIST SP 800-63-4, BBS+ signatures or zero-knowledge proofs
• CISSP, CCSP or AZ-500 certification
