Identity Governance and Administration Engineer

Capgemini Government Solutions

. Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud platforms .

Posted 10/28/2026full-timeRemote • Texas • United StatesMid-LevelSenior💰 $100,000 - $125,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SailPoint IdentityIQ and Identity Security Cloud platforms, with a strong focus on identity governance, integration of enterprise applications, and compliance with federal cybersecurity standards. Proficient in Java, BeanShell, and RESTful API development, ensuring secure and efficient identity management solutions.

Highest-signal resume keywords

SailPoint IdentityIQ AdministrationIdentity And Access Management (IAM)Java And BeanShell DevelopmentCompTIA Security+ CE CertificationFederal Cybersecurity Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SailPoint IdentityIQJavaBeanShellRESTful APIsSCIM InterfacesSQL Query WritingAWSMicrosoft AzureGoogle Cloud PlatformDatabase Maintenance

Tools & Technologies

PAM ToolsBeyondTrustActive DirectoryLDAPGitCI/CD Deployment Pipelines

Certifications & Qualifications

CompTIA Security+ CECYSA+GSECCISSP

Industry Keywords

DoD Cybersecurity StandardsNIST SP 800-53Zero Trust ArchitectureICAM ProgramsSeparation Of Duties

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformJavaOraclePostgresSQL

About the role

Key responsibilities & impact

Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud platforms
Develop custom workflows, rules, forms, policies, and BeanShell/Java scripts
Integrate enterprise applications, databases, directories, and cloud services with SailPoint using web services, REST APIs, SCIM connectors, and custom integrations
Build and maintain automated provisioning and de-provisioning for Joiner, Mover, and Leaver events across hybrid infrastructures
Configure and manage access certification campaigns, entitlement catalogs, and Separation of Duties enforcement policies
Support RBAC and ABAC model design, implementation, and maintenance
Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across SailPoint environments
Ensure configurations align with DoD/Federal cybersecurity standards, STIG compliance, NIST SP 800-53 controls, and ATO assessments
Serve as senior technical escalation point for provisioning errors, synchronization bugs, connector failures, and performance bottlenecks
Partner with organizational stakeholders to deliver secure, efficient, and scalable identity governance capabilities

Requirements

What you’ll need

Must hold an active government security clearance
Bachelor’s degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical discipline
Minimum of six (6) years of dedicated experience in Identity and Access Management (IAM)
At least four (4) years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud
Active CompTIA Security+ CE certification or higher DoD 8570/8140 IAT Level II compliant certification, such as CYSA+, GSEC, or CISSP
Advanced capability in Java, BeanShell, and XML within SailPoint IdentityIQ
Experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations
Understanding of SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations
Working knowledge of Oracle, SQL Server, PostgreSQL, and SQL query writing
Experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture environments
Experience with AWS, Microsoft Azure, Google Cloud Platform, and containerized application deployments
Familiarity with DevSecOps, CI/CD deployment pipelines, and Git
Hands-on integration experience with PAM tools such as BeyondTrust or Identity Providers such as Ping and Entra ID
Applicants for employment in the U.S. must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the U.S.

Benefits

Comp & perks

Paid time off
Medical insurance
Dental insurance
Vision insurance
401(k)