DirectJobHub
Jobs · Engineering · Texas

Identity Governance and Administration (IGA) Engineer

Capgemini Government Solutions · San Antonio, TX · 1 mo ago
Engineering$110k–$125k/yrFull-time

About the role

Capgemini Government Solutions (CGS) LLC is seeking an Identity Governance and Administration (IGA) Engineer to design, deploy, configure, and support enterprise‑wide IGA solutions using the SailPoint platform (IdentityIQ and/or Identity Security Cloud). The role strengthens cybersecurity postures, automates the identity lifecycle (Joiner/Mover/Leaver workflows), enforces Role‑Based Access Control (RBAC), and aligns identity operations with federal mandates and Zero Trust Architecture (ZTA) initiatives. The engineer works closely with security architects, systems administrators, and application owners to ensure seamless integration, compliance automation, and robust operational resilience.

Responsibilities

  • Design, configure, deploy, and maintain SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud platforms.
  • Develop custom workflows, rules, forms, policies, and Beanshell/Java scripts.
  • Integrate enterprise applications, databases, directories (Active Directory, Entra ID, LDAP), and cloud services with SailPoint using out‑of‑the‑box and custom web services/REST APIs/SCIM connectors.
  • Build and maintain automated provisioning and de‑provisioning processes for Joiner, Mover, and Leaver (JML) events across hybrid infrastructures.
  • Configure and manage periodic access certification campaigns, entitlement catalog structures, and Separation of Duties (SoD) enforcement policies.
  • Support the design, implementation, and maintenance of Role‑Based Access Control (RBAC) and Attribute‑Based Access Control (ABAC) models to reduce over‑privileged user access.
  • Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across non‑production and production SailPoint environments.
  • Ensure SailPoint configurations align with DoD/Federal cybersecurity standards (STIG compliance, NIST SP 800‑53 controls) and support Authority to Operate (ATO) assessments.
  • Serve as the senior technical escalation point for complex provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks.

Required Qualifications

  • Ability to obtain a U.S. government security clearance.
  • Bachelor’s degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical discipline.
  • Minimum six (6) years of dedicated experience in Identity and Access Management (IAM), with at least four (4) years of hands‑on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud.
  • Active CompTIA Security+ CE certification (or higher DoD 8570/8140 IAT Level II compliant certification such as CYSA+, GSEC, or CISSP).
  • Superior analytical, troubleshooting, and collaboration skills with a proven history of managing complex technical deliverables independently.

Technical Expertise

  • Advanced capability in developing Java, BeanShell, and XML components within the SailPoint IdentityIQ framework.
  • Experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations.
  • Deep understanding of core identity protocols and directories: SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations.
  • Solid working knowledge of relational database management systems (Oracle, SQL Server, PostgreSQL) and SQL query writing.
  • Direct experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture (ZTA) environments.
  • Experience with cloud platforms (AWS, Microsoft Azure, Google Cloud Platform) and containerized application deployments.
  • Familiarity with DevSecOps, automated CI/CD deployment pipelines, and version control systems (Git).
  • Hands‑on integration experience pairing SailPoint with Privileged Access Management (PAM) tools (e.g., BeyondTrust) or Identity Providers (e.g., Ping, Entra ID).

Benefits

  • Paid time off.
  • Medical, dental, and vision insurance.
  • 401(k) retirement plan.
  • Eligibility for variable compensation, bonus, or commission.
  • Other employee benefits as applicable.

Pay

Base salary range: $110K‑$125K. The role may be eligible for additional variable compensation, bonus, or commission. Full‑time regular employees receive paid time off, medical/dental/vision insurance, 401(k), and other benefits.

Similar jobs