Note: The job is a remote job and is open to candidates in USA. Capgemini Government Solutions (CGS) LLC is seeking an Identity Governance and Administration (IGA) Engineer to design, deploy, configure, and support enterprise-wide SailPoint identity governance solutions. The role focuses on identity lifecycle automation, access controls, compliance with federal cybersecurity standards, integrations, and operational support across hybrid infrastructures.
Responsibilities
- Design, configure, deploy, and maintain SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud platforms. Develop custom workflows, rules, forms, policies, and Beanshell/Java scripts
- Integrate enterprise applications, databases, directories (Active Directory, Entra ID, LDAP), and cloud services with SailPoint using out-of-the-box and custom web services/REST APIs/SCIM connectors
- Build and maintain automated provisioning and de-provisioning processes for Joiner, Mover, and Leaver (JML) events across hybrid infrastructures
- Configure and manage periodic access certification campaigns, entitlement catalog structures, and Separation of Duties (SoD) enforcement policies
- Support the design, implementation, and maintenance of Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models to reduce over-privileged user access
- Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across non-production and production SailPoint environments
- Ensure SailPoint configurations align with DoD/Federal cybersecurity standards (STIG compliance, NIST SP 800-53 controls) and support Authority to Operate (ATO) assessments
- Serve as the senior technical escalation point for complex provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks
Skills
- Have an active Secret or higher-level Government security clearance that requires U.S. citizenship
- Bachelor's degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical discipline
- Minimum of six (6) years of dedicated experience in Identity and Access Management (IAM), with at least four (4) years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud
- Active CompTIA Security+ CE certification (or higher DoD 8570/8140 IAT Level II compliant certification, such as CYSA+, GSEC, or CISSP)
- Superior analytical, troubleshooting, and collaboration skills, with a proven history of managing complex technical deliverables independently
- Advanced capability in developing Java, BeanShell, and XML components within the SailPoint IdentityIQ framework
- Demonstrated experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations
- Deep understanding of core identity protocols and directories: SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations
- Solid working knowledge of relational database management systems (Oracle, SQL Server, PostgreSQL) and SQL query writing
- Direct experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture (ZTA) environments
- Experience with cloud platforms (AWS, Microsoft Azure, Google Cloud Platform) and containerized application deployments
- Familiarity with DevSecOps, automated CI/CD deployment pipelines, and version control systems (Git)
- Hands-on integration experience pairing SailPoint with Privileged Access Management (PAM) tools (e.g., BeyondTrust) or Identity Providers (e.g. Ping, Entra ID)
Benefits
- This role may be eligible for other compensation including variable compensation, bonus, or commission.
- Full-time regular employees are eligible for paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees.
- Remote work arrangement
Company Overview