IAM Java & SailPoint Engineer

LanceSoft•Lansing, MI

21h•Onsite

About The Position

The IAM Java & SailPoint Engineer is a hands-on Java development contractor supporting Michigan State University’s enterprise identity and access management (IAM) services. The role develops, maintains, integrates, and modernizes Java-based IAM applications and SailPoint IdentityIQ (IIQ), sustains production operations, and supports the IAM Modernization Program as identity workflows move from legacy services to the future-state IAM platform. Work includes My Identity/NGP go-live and operational support. The position requires troubleshooting across the application stack and is not a dedicated system administrator role. The engineer will maintain and enhance supported Java/IAM and SailPoint IIQ services, resolve and document production defects and cross-stack incidents, and deliver tested integrations and modernization or migration work. Deliverables include technical designs, release documentation, operational runbooks, and knowledge transfer to MSU staff. The contract duration is listed as 11/2026–6/30/2027 and is renewable. The role is located at 4000 Collins Road, Lansing, MI 48910, with a negotiable pay range of $70.00 to $80.00.

Requirements

Knowledge equivalent to a four-year degree in a related IT field and five to eight years of progressively responsible enterprise application/IAM experience, or an equivalent combination of education and experience.
Hands-on Java development experience.
Experience with APIs and systems integration.
Experience with software testing and secure coding.
Experience with production support, root-cause troubleshooting, and log analysis.
Ability to produce technical documentation.
Ability to work with technical and business teams.

Nice To Haves

Five to eight years of SailPoint IIQ engineering or administration experience.
SailPoint IIQ certification or comparable expertise.
Experience with Java, BeanShell, Spring Boot, REST, XML, JSON, SQL, Git, and CI/CD.
Comfort working in Linux and with Tomcat/JBoss, Java application deployment and runtime, Kubernetes/OpenShift, middleware and application logs, performance tuning, and high-availability operations.
Availability for occasional scheduled after-hours support.

Responsibilities

Analyze, reverse engineer, refactor, develop, test, and maintain Java and BeanShell components.
Build and support Spring Boot services, REST APIs, and enterprise integrations.
Engineer and support SailPoint IIQ rules, workflows, connectors, provisioning policies, tasks, forms, certifications, attestations, reports, and application onboarding.
Maintain identity lifecycle workflows, provisioning, reconciliation, access governance, and integrations with HR and other authoritative sources, directories, databases, cloud services, and enterprise applications.
Investigate production incidents end-to-end using Linux and application, middleware, and server logs.
Diagnose Java deployments and runtime behavior and isolate faults across Java code, Tomcat/JBoss, databases, directory integrations, connectors, and dependent services.
Support platform upgrades, deployment and performance troubleshooting, stability improvements, technical debt reduction, and modernization or migration of IIQ workflows and integrations.
Support My Identity/NGP go-live and operations.
Apply secure engineering practices, unit and integration testing, code reviews, source control, CI/CD, monitoring, metrics, and tracing.
Document solutions and operational runbooks.
Collaborate with IAM engineers, architects, application owners, vendors, and stakeholders; provide status updates, estimates, incident communication, peer review, cross-training, and knowledge transfer.
Maintain and enhance supported Java/IAM and SailPoint IIQ services and resolve and document production defects and cross-stack incidents.
Deliver tested integrations and modernization or migration work, including technical designs, release documentation, runbooks, and knowledge transfer to MSU staff.