Identity Governance and Administration (IGA) Engineer

ITC Digital Solutions•San Antonio, TX

About The Position

ITC Digital Solutions is seeking an Identity Governance and Administration (IGA) Engineer to design, deploy, configure, and maintain enterprise identity governance solutions using SailPoint IdentityIQ and/or Identity Security Cloud. The role supports cybersecurity, automated identity lifecycle processes, RBAC policies, Zero Trust, and federal compliance initiatives. The engineer partners with stakeholders across the organization to deliver secure, efficient, and scalable identity governance capabilities. The position includes developing SailPoint customizations and integrations, automating provisioning and de-provisioning across hybrid environments, managing access certifications and SoD policies, and supporting RBAC and ABAC models. The engineer also maintains SailPoint environments and ensures alignment with DoD and federal cybersecurity requirements, including STIG and NIST SP 800-53 controls, while supporting ATO assessments. This role serves as a senior technical escalation point for complex SailPoint issues. ITC Digital Solutions is a division of ITC Federal, which delivers technology solutions to federal agencies. The company describes more than two decades of public sector experience across IT strategy, application development and testing, digital modernization, data and AI, and technology transformation. Applicants must have U.S. work authorization that does not require current or future visa sponsorship.

Requirements

Must hold an active government security clearance.
Bachelor’s degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical discipline.
At least six years of dedicated Identity and Access Management experience, including at least four years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud.
Active CompTIA Security+ CE certification or a higher DoD 8570/8140 IAT Level II compliant certification, such as CYSA+, GSEC, or CISSP.
Superior analytical, troubleshooting, and collaboration skills, with a proven history of managing complex technical deliverables independently.
Advanced capability in developing Java, BeanShell, and XML components within the SailPoint IdentityIQ framework.
Demonstrated experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations.
Deep understanding of SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations.
Working knowledge of relational database management systems, including Oracle, SQL Server, and PostgreSQL, and SQL query writing.
Direct experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture environments.

Nice To Haves

Experience with AWS, Microsoft Azure, or Google Cloud Platform and containerized application deployments.
Familiarity with DevSecOps, automated CI/CD deployment pipelines, and version control systems such as Git.
Hands-on experience integrating SailPoint with Privileged Access Management tools such as BeyondTrust or identity providers such as Ping or Entra ID.

Responsibilities

Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud platforms.
Develop custom workflows, rules, forms, policies, and BeanShell/Java scripts.
Integrate enterprise applications, databases, directories, and cloud services with SailPoint using out-of-the-box and custom web services, REST APIs, and SCIM connectors.
Build and maintain automated provisioning and de-provisioning processes for Joiner, Mover, and Leaver events across hybrid infrastructures.
Configure and manage periodic access certification campaigns, entitlement catalog structures, and Separation of Duties enforcement policies.
Support the design, implementation, and maintenance of RBAC and ABAC models to reduce over-privileged user access.
Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across non-production and production SailPoint environments.
Ensure SailPoint configurations align with DoD and federal cybersecurity standards, including STIG compliance and NIST SP 800-53 controls, and support ATO assessments.
Serve as the senior technical escalation point for complex provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks.