Identity Governance and Administration Engineer

This is a fully remote position, open to applicants in Texas.

📋 Description

• Design, configure, deploy, and maintain SailPoint IdentityIQ or SailPoint Identity Security Cloud platforms.

• Create custom workflows, rules, forms, policies, and BeanShell/Java scripts.

• Integrate enterprise applications, databases, directories, and cloud services with SailPoint using web services, REST APIs, and SCIM connectors.

• Establish and uphold automated provisioning and de-provisioning processes for Joiner, Mover, and Leaver events across hybrid infrastructures.

• Configure and oversee periodic access certification campaigns, entitlement catalogs, and Separation of Duties enforcement policies.

• Assist in the design, implementation, and maintenance of RBAC and ABAC models.

• Conduct system health checks, performance tuning, patching, version upgrades, and database maintenance across both non-production and production environments.

• Ensure configurations comply with DoD/Federal cybersecurity standards, STIG compliance, and NIST SP 800-53 controls, while supporting ATO assessments.

• Act as a senior technical escalation point for provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks.

• Collaborate with stakeholders throughout the organization to provide secure, efficient, and scalable identity governance capabilities.

⛳️ Requirements

• Must possess an active government security clearance.

• Bachelor’s degree in Information Technology, Computer Science, Systems Engineering, or a related field, or an additional four years of experience in place of the degree.

• At least six (6) years of focused experience in Identity and Access Management (IAM).

• Minimum of four (4) years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud.

• Active CompTIA Security+ CE certification or a higher DoD 8570/8140 IAT Level II compliant certification, such as CYSA+, GSEC, or CISSP.

• Advanced proficiency in Java, BeanShell, and XML within the SailPoint IdentityIQ framework.

• Experience in building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations.

• Knowledge of SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations.

• Proficient in Oracle, SQL Server, PostgreSQL, and writing SQL queries.

• Experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture environments.

• Familiarity with AWS, Microsoft Azure, Google Cloud Platform, and containerized application deployments.

• Understanding of DevSecOps, automated CI/CD deployment pipelines, and Git.

• Practical integration experience connecting SailPoint with PAM tools such as BeyondTrust or Identity Providers like Ping and Entra ID.

• Applicants for employment in the U.S. must have valid work authorization that does not currently or will not in the future require visa sponsorship.

• Demonstrated capability in managing complex technical deliverables independently.

🏝️ Benefits

• Paid time off.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• 401(k).

• Potential bonus, commission, or other compensation at the Company’s discretion until paid.