Identity Governance and Administration (IGA) Engineer

Capgemini•San Antonio, TX

6d•$100,000 - $125,000

About The Position

ITC Digital Solutions is seeking an Identity Governance and Administration (IGA) Engineer to design, deploy, configure, and maintain enterprise-wide identity governance solutions using SailPoint IdentityIQ and/or Identity Security Cloud. The role supports cybersecurity, identity lifecycle automation, RBAC enforcement, Zero Trust, and federal compliance initiatives. The engineer works with stakeholders across the organization to deliver secure, efficient, and scalable identity governance capabilities. The position includes developing SailPoint workflows, rules, forms, policies, and scripts; integrating enterprise applications, directories, databases, and cloud services; and automating joiner, mover, and leaver provisioning. It also covers access certifications, entitlement catalogs, separation-of-duties controls, RBAC and ABAC models, platform maintenance and performance, and alignment with DoD and federal cybersecurity standards. The engineer serves as a senior technical escalation point for complex SailPoint and identity management issues. ITC Digital Solutions is a division of ITC Federal. It provides technology solutions to federal agencies, drawing on more than two decades of public-sector experience across IT strategy, application development and testing, digital modernization, data and AI, and technology transformation. The listed base salary range is $100,000–$125,000. Full-time regular employees are eligible for paid time off, medical, dental, and vision insurance, a 401(k), and other benefits available to eligible employees.

Requirements

Must hold an active government security clearance.
Bachelor’s degree in computer science, cybersecurity, information technology, computer engineering, or a related technical discipline.
At least six years of dedicated IAM experience, including at least four years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud.
Active CompTIA Security+ CE certification or a higher DoD 8570/8140 IAT Level II-compliant certification, such as CYSA+, GSEC, or CISSP.
Superior analytical, troubleshooting, and collaboration skills, with a proven history of independently managing complex technical deliverables.
Advanced capability developing Java, BeanShell, and XML components within the SailPoint IdentityIQ framework.
Demonstrated experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations.
Deep understanding of SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations.
Working knowledge of relational database management systems, including Oracle, SQL Server, and PostgreSQL, and SQL query writing.
Direct experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture environments.
Applicants must have U.S. work authorization that does not now or in the future require visa sponsorship from ITC.

Nice To Haves

Experience with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform and with containerized application deployments.
Familiarity with DevSecOps, automated CI/CD deployment pipelines, and version control systems such as Git.
Hands-on experience integrating SailPoint with Privileged Access Management tools such as BeyondTrust or identity providers such as Ping or Entra ID.

Responsibilities

Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud, including developing custom workflows, rules, forms, policies, and BeanShell/Java scripts.
Integrate enterprise applications, databases, directories, and cloud services with SailPoint using standard and custom web services, REST APIs, and SCIM connectors.
Build and maintain automated provisioning and de-provisioning processes for joiner, mover, and leaver events across hybrid infrastructures.
Configure and manage periodic access certification campaigns, entitlement catalog structures, and Separation of Duties enforcement policies.
Support the design, implementation, and maintenance of RBAC and ABAC models to reduce over-privileged user access.
Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across production and non-production SailPoint environments.
Ensure SailPoint configurations align with DoD and federal cybersecurity standards, including STIG compliance and NIST SP 800-53 controls, and support Authority to Operate assessments.
Serve as the senior technical escalation point for complex provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks.