SalariesSign in
AboutPrivacyTerms
Identity Governance and Administration (IGA) Engineer
CCapgemini Technology Services

Identity Governance and Administration (IGA) Engineer

United StatesRemoteFull-time
Pay Range: $110k - $125k / annual
Posted Sep 6
Apply

Job Description

Capgemini Government Solutions (CGS) LLC Identity Governance and Administration (IGA) Engineer is responsible for designing, deploying, configuring, and supporting enterprise-wide Identity Governance and Administration (IGA) solutions using the SailPoint platform (IdentityIQ and/or Identity Security Cloud). This role plays a critical part in strengthening enterprise cybersecurity postures, automating the identity lifecycle (Joiner/Mover/Leaver workflows), enforcing Role-Based Access Control (RBAC), and aligning identity operations with federal mandates and Zero Trust Architecture (ZTA) initiatives. Working closely with security architects, systems administrators, and application owners, the SailPoint Engineer ensures seamless integration, compliance automation, and robust operational resilience.

Job Responsibilities

As Identity Governance and Administration (IGA) Engineer, you will be responsible for:

  • Design, configure, deploy, and maintain SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud platforms. Develop custom workflows, rules, forms, policies, and Beanshell/Java scripts.
  • Integrate enterprise applications, databases, directories (Active Directory, Entra ID, LDAP), and cloud services with SailPoint using out-of-the-box and custom web services/REST APIs/SCIM connectors.
  • Build and maintain automated provisioning and de-provisioning processes for Joiner, Mover, and Leaver (JML) events across hybrid infrastructures.
  • Configure and manage periodic access certification campaigns, entitlement catalog structures, and Separation of Duties (SoD) enforcement policies.
  • Support the design, implementation, and maintenance of Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models to reduce over-privileged user access.
  • Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across non-production and production SailPoint environments.
  • Ensure SailPoint configurations align with DoD/Federal cybersecurity standards (STIG compliance, NIST SP 800-53 controls) and support Authority to Operate (ATO) assessments.
  • Serve as the senior technical escalation point for complex provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks.

Required Qualifications

  • Have an active Secret or higher-level Government security clearance that requires U.S. citizenship
  • Bachelor’s degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical discipline.
  • Minimum of six (6) years of dedicated experience in Identity and Access Management (IAM), with at least four (4) years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud.
  • Active CompTIA Security+ CE certification (or higher DoD 8570/8140 IAT Level II compliant certification, such as CYSA+, GSEC, or CISSP).
  • Superior analytical, troubleshooting, and collaboration skills, with a proven history of managing complex technical deliverables independently.

Technical Expertise:

  • Advanced capability in developing Java, BeanShell, and XML components within the SailPoint IdentityIQ framework.
  • Demonstrated experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations.
  • Deep understanding of core identity protocols and directories: SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations.
  • Solid working knowledge of relational database management systems (Oracle, SQL Server, PostgreSQL) and SQL query writing.
  • Direct experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture (ZTA) environments.
  • Experience with cloud platforms (AWS, Microsoft Azure, Google Cloud Platform) and containerized application deployments.
  • Familiarity with DevSecOps, automated CI/CD deployment pipelines, and version control systems (Git).
  • Hands-on integration experience pairing SailPoint with Privileged Access Management (PAM) tools (e.g., BeyondTrust) or Identity Providers (e.g. Ping, Entra ID)

About Capgemini

Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem. The Group reported 2024 global revenues of €22.1 billion.

Get the future you want | www.capgemini.com

Disclaimer

All qualified applicants will be considered for employment based on their skills, and merit.

Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.

Applicants for employment in the US must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the US by Capgemini.

Capgemini discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors that are considered in making compensation decisions including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority, performance, sales or revenue-based metrics, and business or organizational needs. At Capgemini, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $110K-$125K

This role may be eligible for other compensation including variable compensation, bonus, or commission. Full-time regular employees are eligible for paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.

Originally posted on Himalayas

View job

Senior Information Security Engineer

Job&Talent

  • Spain
  • Remote
  • Full-time
Apply
Sep 7
View job

Principal Security Researcher

GitLab

  • Canada
  • Remote
  • Full-time
Apply
Sep 7
View job

Director, AI & Security Development

Brown & Brown Insurance

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Manager, Information Security

Aderant

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Principal Security Engineer

HealthEquity

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Security Architect

Henry Schein

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Senior Security Engineer - Manufacturing Cybersecurity

Lifelancer

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Staff Security Researcher

GitLab

  • Canada
  • Remote
  • Full-time
Apply
Sep 7
View job

DevSecOps Engineer

DecisionPoint Corporation

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Security Risk Management Lead

Affirm

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Cybersecurity GRC Evaluator - Expert

mercor

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 7
View job

Technical Program Management, Guidewire Security

Guidewire Software

  • Canada
  • Remote
  • Full-time
Apply
Sep 7
View job

IT & Security Engineer (Contract)

Parachute Health

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Privacy Associate (Privacy Compliance Specialist, Sr)

Oregon Health & Science University

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Privacy & Cybersecurity, Sr. Counsel

Cardinal Health

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Information Security Manager - Network Security

Ferguson

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Offensive Security Technical Lead

CACI International Inc

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

SOC Engineer (Incident Response)

Binance

  • Hong Kong
  • Remote
  • Full-time
Apply
Sep 7
View job

Senior Security Engineer - AppSec (d/f/m)

vivenu

  • Germany
  • Remote
  • Full-time
Apply
Sep 7
View job

Security Vulnerability Engineer (R-00224)

True Zero Technologies

  • United States
  • Remote
  • Full-time
Apply
Sep 6
View job
C

Identity Governance and Administration (IGA) Engineer

Capgemini Technology Services

  • United States
  • Remote
  • Full-time
Apply
Sep 6
View job

Full Stack Engineer- IAM Solutions

AHEAD

  • India
  • Remote
  • Full-time
Apply
Sep 6
View job

Head of Information Security/Compliance

Frontera Health

  • United States
  • Remote
  • Full-time
Apply
Sep 6
View job

Director, Global Privacy Program

Consilio LLC

  • United States
  • Remote
Apply
Sep 6
View job

Cyber Risk Analyst

Sun King

  • India
  • Remote
  • Full-time
Apply
Sep 6
View job

CVE & Application Security AI Task Auditor - Freelance AI Trainer Project

Invisible Technologies

  • Worldwide
  • Remote
  • Contract
Apply
Sep 6
View job

Member of the Technical Staff, Security Operations

Anchorage Digital

  • United States
  • Remote
  • Full-time
Apply
Sep 6
View job

Staff Offensive Security Engineer

Samsara

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 6
View job

Cybersecurity Assessment Data Analyst

CACI International Inc

  • United States
  • Remote
  • Full-time
Apply
Sep 6
View job

Staff Security Engineer

Twilio

  • United States
  • Remote
  • Full-time
Apply
Sep 6
PreviousPage 113 of 127Next
CCapgemini Technology Services

Identity Governance and Administration (IGA) Engineer

United StatesRemoteFull-time
Pay Range: $110k - $125k / annual
Posted Sep 6
Apply

Job Description

Capgemini Government Solutions (CGS) LLC Identity Governance and Administration (IGA) Engineer is responsible for designing, deploying, configuring, and supporting enterprise-wide Identity Governance and Administration (IGA) solutions using the SailPoint platform (IdentityIQ and/or Identity Security Cloud). This role plays a critical part in strengthening enterprise cybersecurity postures, automating the identity lifecycle (Joiner/Mover/Leaver workflows), enforcing Role-Based Access Control (RBAC), and aligning identity operations with federal mandates and Zero Trust Architecture (ZTA) initiatives. Working closely with security architects, systems administrators, and application owners, the SailPoint Engineer ensures seamless integration, compliance automation, and robust operational resilience.

Job Responsibilities

As Identity Governance and Administration (IGA) Engineer, you will be responsible for:

  • Design, configure, deploy, and maintain SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud platforms. Develop custom workflows, rules, forms, policies, and Beanshell/Java scripts.
  • Integrate enterprise applications, databases, directories (Active Directory, Entra ID, LDAP), and cloud services with SailPoint using out-of-the-box and custom web services/REST APIs/SCIM connectors.
  • Build and maintain automated provisioning and de-provisioning processes for Joiner, Mover, and Leaver (JML) events across hybrid infrastructures.
  • Configure and manage periodic access certification campaigns, entitlement catalog structures, and Separation of Duties (SoD) enforcement policies.
  • Support the design, implementation, and maintenance of Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models to reduce over-privileged user access.
  • Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across non-production and production SailPoint environments.
  • Ensure SailPoint configurations align with DoD/Federal cybersecurity standards (STIG compliance, NIST SP 800-53 controls) and support Authority to Operate (ATO) assessments.
  • Serve as the senior technical escalation point for complex provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks.

Required Qualifications

  • Have an active Secret or higher-level Government security clearance that requires U.S. citizenship
  • Bachelor’s degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical discipline.
  • Minimum of six (6) years of dedicated experience in Identity and Access Management (IAM), with at least four (4) years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud.
  • Active CompTIA Security+ CE certification (or higher DoD 8570/8140 IAT Level II compliant certification, such as CYSA+, GSEC, or CISSP).
  • Superior analytical, troubleshooting, and collaboration skills, with a proven history of managing complex technical deliverables independently.

Technical Expertise:

  • Advanced capability in developing Java, BeanShell, and XML components within the SailPoint IdentityIQ framework.
  • Demonstrated experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations.
  • Deep understanding of core identity protocols and directories: SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations.
  • Solid working knowledge of relational database management systems (Oracle, SQL Server, PostgreSQL) and SQL query writing.
  • Direct experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture (ZTA) environments.
  • Experience with cloud platforms (AWS, Microsoft Azure, Google Cloud Platform) and containerized application deployments.
  • Familiarity with DevSecOps, automated CI/CD deployment pipelines, and version control systems (Git).
  • Hands-on integration experience pairing SailPoint with Privileged Access Management (PAM) tools (e.g., BeyondTrust) or Identity Providers (e.g. Ping, Entra ID)

About Capgemini

Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem. The Group reported 2024 global revenues of €22.1 billion.

Get the future you want | www.capgemini.com

Disclaimer

All qualified applicants will be considered for employment based on their skills, and merit.

Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.

Applicants for employment in the US must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the US by Capgemini.

Capgemini discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors that are considered in making compensation decisions including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority, performance, sales or revenue-based metrics, and business or organizational needs. At Capgemini, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $110K-$125K

This role may be eligible for other compensation including variable compensation, bonus, or commission. Full-time regular employees are eligible for paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.

Originally posted on Himalayas