Identity Governance and Administration Engineer

Capgemini Government Solutions

. Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud platforms .

Posted 11/5/2026full-timeRemote • Texas • United StatesMid-LevelSenior💰 $110,000 - $125,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SailPoint IdentityIQ and Identity Security Cloud platforms, with a strong focus on identity governance, integration of enterprise applications, and compliance with federal cybersecurity standards. Proven ability to manage complex technical deliverables and implement identity and access management solutions in federal environments.

Highest-signal resume keywords

SailPoint IdentityIQ AdministrationIdentity And Access Management (IAM)Java And BeanShell ScriptingRESTful API DevelopmentCompTIA Security+ CE Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SailPoint IdentityIQIdentity Security CloudJavaBeanShellREST APIsSCIM ConnectorsSQL Query WritingAWSMicrosoft AzureOracle

Soft Skills

Stakeholder CollaborationProblem SolvingIndependent Management

Tools & Technologies

Active DirectoryLDAPPKI/CAC/PIVBeyondTrustGit

Certifications & Qualifications

CompTIA Security+ CECYSA+GSECCISSP

Industry Keywords

DoD Cybersecurity StandardsNIST SP 800-53Zero Trust ArchitectureFederal/DoD ICAM ProgramsDevSecOps

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformJavaOraclePostgresSQL

About the role

Key responsibilities & impact

Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud platforms
Develop custom workflows, rules, forms, policies, and BeanShell/Java scripts
Integrate enterprise applications, databases, directories, and cloud services with SailPoint using web services, REST APIs, and SCIM connectors
Build and maintain automated provisioning and de-provisioning processes for Joiner, Mover, and Leaver events across hybrid infrastructures
Configure and manage periodic access certification campaigns, entitlement catalogs, and Separation of Duties enforcement policies
Support RBAC and ABAC model design, implementation, and maintenance
Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across non-production and production environments
Ensure configurations align with DoD/Federal cybersecurity standards, STIG compliance, and NIST SP 800-53 controls, and support ATO assessments
Serve as senior technical escalation point for provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks
Partner with stakeholders across the organization to deliver secure, efficient, and scalable identity governance capabilities

Requirements

What you’ll need

Must hold an active government security clearance
Bachelor’s degree in Information Technology, Computer Science, Systems Engineering, or related field, or an additional 4 years of experience in lieu of the degree
Minimum of six (6) years of dedicated experience in Identity and Access Management (IAM)
At least four (4) years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud
Active CompTIA Security+ CE certification or higher DoD 8570/8140 IAT Level II compliant certification, such as CYSA+, GSEC, or CISSP
Advanced capability in Java, BeanShell, and XML within the SailPoint IdentityIQ framework
Experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations
Understanding of SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations
Working knowledge of Oracle, SQL Server, PostgreSQL, and SQL query writing
Experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture environments
Experience with AWS, Microsoft Azure, Google Cloud Platform, and containerized application deployments
Familiarity with DevSecOps, automated CI/CD deployment pipelines, and Git
Hands-on integration experience pairing SailPoint with PAM tools such as BeyondTrust or Identity Providers such as Ping and Entra ID
Applicants for employment in the U.S. must have valid work authorization that does not now and/or will not in the future require visa sponsorship
Proven history of managing complex technical deliverables independently

Benefits

Comp & perks

Paid time off
Medical insurance
Dental insurance
Vision insurance
401(k)
Potential bonus, commission, or other compensation, at the Company’s sole discretion unless and until paid