Identity Governance and Administration (IGA) Engineer

Capgemini•San Antonio, TX

2d•$110,000 - $125,000

About The Position

ITC Digital Solutions is seeking an Identity Governance and Administration (IGA) Engineer to design, deploy, configure, and maintain enterprise-wide identity governance solutions using SailPoint IdentityIQ and/or SailPoint Identity Security Cloud. The role supports cybersecurity, identity lifecycle automation, role-based access control, Zero Trust, and federal compliance initiatives, working with stakeholders to deliver secure, efficient, scalable identity governance capabilities. The engineer builds and maintains SailPoint integrations, workflows, provisioning processes, access certification campaigns, entitlement catalogs, and SoD policies. The role also supports RBAC and ABAC models, system health and performance, upgrades and database maintenance, and alignment with federal cybersecurity standards and Authority to Operate assessments. As a senior technical escalation point, the engineer resolves complex provisioning, synchronization, connector, and performance issues.

Requirements

Must hold an active government security clearance.
Bachelor’s degree in Information Technology, Computer Science, Systems Engineering, or a related field, or an additional four years of experience in lieu of the degree.
At least six years of dedicated IAM experience, including at least four years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud.
Active CompTIA Security+ CE certification or a higher DoD 8570/8140 IAT Level II-compliant certification, such as CYSA+, GSEC, or CISSP.
Superior analytical, troubleshooting, and collaboration skills, with a proven history of independently managing complex technical deliverables.
Advanced capability developing Java, BeanShell, and XML components within the SailPoint IdentityIQ framework.
Experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations.
Deep understanding of SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations.
Working knowledge of relational database management systems such as Oracle, SQL Server, and PostgreSQL, and SQL query writing.
Direct experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture environments.

Nice To Haves

Experience with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform and with containerized application deployments.
Familiarity with DevSecOps, automated CI/CD deployment pipelines, and version control systems such as Git.
Hands-on integration experience pairing SailPoint with Privileged Access Management tools such as BeyondTrust or identity providers such as Ping or Entra ID.

Responsibilities

Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud platforms; develop custom workflows, rules, forms, policies, and BeanShell/Java scripts.
Integrate enterprise applications, databases, directories, and cloud services with SailPoint using standard and custom web services, REST APIs, and SCIM connectors.
Build and maintain automated provisioning and de-provisioning for Joiner, Mover, and Leaver events across hybrid infrastructures.
Configure and manage periodic access certification campaigns, entitlement catalog structures, and Separation of Duties enforcement policies.
Support the design, implementation, and maintenance of RBAC and ABAC models to reduce over-privileged access.
Perform system health checks, performance tuning, patching, version upgrades, and database maintenance in non-production and production SailPoint environments.
Ensure SailPoint configurations align with DoD and federal cybersecurity standards, including STIG compliance and NIST SP 800-53 controls, and support ATO assessments.
Serve as the senior technical escalation point for complex provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks.