Identity Governance and Administration (IGA) Engineer

ITC Digital Solutions•San Antonio, TX

About The Position

ITC Digital Solutions is seeking an Identity Governance and Administration (IGA) Engineer to design, deploy, configure, and maintain enterprise identity governance solutions using SailPoint IdentityIQ and/or SailPoint Identity Security Cloud. The role supports cybersecurity, identity lifecycle automation, RBAC policy enforcement, Zero Trust, and federal compliance initiatives, collaborating with stakeholders to deliver secure, efficient, and scalable identity governance capabilities. The engineer integrates enterprise applications, databases, directories, and cloud services; develops SailPoint components and automated identity processes; administers access certifications and access-control policies; and maintains SailPoint environments. The position also supports DoD and federal cybersecurity standards and ATO assessments, and serves as a senior technical escalation point for complex identity governance issues.

Requirements

Must hold an active government security clearance.
Bachelor’s degree in Information Technology, Computer Science, Systems Engineering, or a related field, or four additional years of experience in lieu of the degree.
At least six years of dedicated IAM experience, including at least four years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud.
Active CompTIA Security+ CE certification or a higher DoD 8570/8140 IAT Level II-compliant certification, such as CYSA+, GSEC, or CISSP.
Strong analytical, troubleshooting, and collaboration skills, with a proven ability to manage complex technical deliverables independently.
Advanced ability to develop Java, BeanShell, and XML components within the SailPoint IdentityIQ framework.
Experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations.
Deep understanding of SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations.
Working knowledge of relational database management systems, including Oracle, SQL Server, and PostgreSQL, and SQL query writing.
Direct experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture environments.

Nice To Haves

Experience with AWS, Microsoft Azure, or Google Cloud Platform.
Experience with containerized application deployments.
Familiarity with DevSecOps, automated CI/CD deployment pipelines, and version control systems such as Git.
Hands-on experience integrating SailPoint with Privileged Access Management tools such as BeyondTrust or identity providers such as Ping or Entra ID.

Responsibilities

Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud platforms.
Develop custom workflows, rules, forms, policies, and BeanShell/Java scripts.
Integrate enterprise applications, databases, directories, and cloud services with SailPoint using standard and custom web services, REST APIs, and SCIM connectors.
Build and maintain automated provisioning and de-provisioning processes for Joiner, Mover, and Leaver events across hybrid infrastructures.
Configure and manage periodic access certification campaigns, entitlement catalog structures, and Separation of Duties enforcement policies.
Support the design, implementation, and maintenance of RBAC and ABAC models to reduce over-privileged access.
Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across production and non-production SailPoint environments.
Ensure SailPoint configurations align with DoD and federal cybersecurity standards, including STIG compliance and NIST SP 800-53 controls, and support ATO assessments.
Act as the senior technical escalation point for complex provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks.