Identity Governance and Administration (IGA) Engineer

Capgemini•San Antonio, TX

6d•$100,000 - $125,000

About The Position

ITC Digital Solutions is seeking an Identity Governance and Administration (IGA) Engineer to design, deploy, configure, and maintain enterprise identity governance solutions using SailPoint IdentityIQ and/or SailPoint Identity Security Cloud. The role supports cybersecurity, automated identity lifecycle processes, RBAC policy enforcement, Zero Trust initiatives, and federal compliance. The engineer partners with stakeholders across the organization to deliver secure, efficient, and scalable identity governance capabilities. The engineer will integrate enterprise applications, databases, directories, and cloud services; automate joiner, mover, and leaver processes; manage access certifications and separation-of-duties policies; and support RBAC and ABAC models. The role also includes maintaining SailPoint environments, supporting federal cybersecurity standards and ATO assessments, and serving as a senior technical escalation point for complex technical issues. ITC Digital Solutions is a division of ITC Federal and delivers technology solutions to federal agencies, drawing on more than two decades of public-sector experience. The base salary range for the tagged location is $100,000–$125,000. Full-time regular employees are eligible for paid time off, medical, dental, and vision insurance, and a 401(k), along with other benefits available to eligible employees.

Requirements

Hold an active government security clearance.
Bachelor’s degree in computer science, cybersecurity, information technology, computer engineering, or a related technical discipline.
At least six years of dedicated Identity and Access Management experience, including at least four years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud.
Active CompTIA Security+ CE certification or a higher DoD 8570/8140 IAT Level II-compliant certification, such as CYSA+, GSEC, or CISSP.
Strong analytical, troubleshooting, and collaboration skills, with a demonstrated history of independently managing complex technical deliverables.
Advanced capability developing Java, BeanShell, and XML components within the SailPoint IdentityIQ framework.
Experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations.
Deep understanding of SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations.
Working knowledge of relational database management systems, including Oracle, SQL Server, and PostgreSQL, and SQL query writing.
Direct experience implementing SailPoint solutions in Federal/DoD ICAM programs or Zero Trust Architecture environments.

Nice To Haves

Experience with AWS, Microsoft Azure, or Google Cloud Platform and containerized application deployments.
Familiarity with DevSecOps, automated CI/CD deployment pipelines, and version control systems such as Git.
Hands-on integration experience connecting SailPoint with Privileged Access Management tools such as BeyondTrust or identity providers such as Ping and Entra ID.

Responsibilities

Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud platforms, including developing custom workflows, rules, forms, policies, and BeanShell/Java scripts.
Integrate enterprise applications, databases, directories, and cloud services with SailPoint using standard and custom web services, REST APIs, and SCIM connectors.
Build and maintain automated provisioning and de-provisioning for Joiner, Mover, and Leaver events across hybrid infrastructures.
Configure and manage periodic access certification campaigns, entitlement catalogs, and Separation of Duties enforcement policies.
Support the design, implementation, and maintenance of RBAC and ABAC models to reduce over-privileged access.
Perform health checks, performance tuning, patching, version upgrades, and database maintenance across production and non-production SailPoint environments.
Align SailPoint configurations with DoD and federal cybersecurity standards, including STIG compliance and NIST SP 800-53 controls, and support Authority to Operate assessments.
Serve as the senior technical escalation point for complex provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks.