> Markdown version of [/jobs/ext/2054388-identity-governance-and-administration-iga-engineer](https://www.wearedevelopers.com/jobs/ext/2054388-identity-governance-and-administration-iga-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Governance and Administration (IGA) Engineer - **Company:** Capgemini - **Location:** San Antonio, TX, United States (Remote available) - **Experience:** Experienced - **Salary:** $110,000.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Active Directory, Amazon Web Services, Application Integration Architecture, Microsoft Azure, Cloud Computing, Cloud Computing Security, CompTIA Security+, Cyber Security, Databases, Computer Engineering, Relational Databases, Identity and Access Management, Java Database Connectivity, Lightweight Directory Access Protocols (LDAP), PostgreSQL, Microsoft SQL Server, OAuth, OpenID, Oracle (Applications), Performance Tuning, Ping (Networking Utility), Public Key Infrastructure, Role-Based Access Control, Cloud Services, Zero Trust Network Access, Security Assertion Markup Language (SAML), SQL Databases, Systems Integration, Web Services, Extensible Markup Language (XML), Google Cloud, Enterprise Software Applications, Delivery Pipeline, Git, Information Technology, SailPoint, Restful APIs, Software Version Control, BeanShell, Devsecops - **Published:** August 14, 2026 - **Apply:** https://www.dice.com/job-detail/0b56a2c9-2299-4809-a788-102e8d60df07 ## About the Role * Have an active Secret or higher-level Government security clearance that requires U.S. citizenship * Bachelor?s degree in computer science, Cybersecurity, Information Technology, Computer Engineering, or a related technical discipline. * Minimum of six (6) years of dedicated experience in Identity and Access Management (IAM), with at least four (4) years of hands-on engineering, configuration, and administration of SailPoint IdentityIQ or SailPoint Identity Security Cloud. * Active CompTIA Security+ CE certification (or higher DoD 8570/8140 IAT Level II compliant certification, such as CYSA+, GSEC, or CISSP). * Superior analytical, troubleshooting, and collaboration skills, with a proven history of managing complex technical deliverables independently. Technical Expertise: * Advanced capability in developing Java, BeanShell, and XML components within the SailPoint IdentityIQ framework. * Demonstrated experience building RESTful APIs, SCIM interfaces, JDBC connectors, and custom application integrations. * Deep understanding of core identity protocols and directories: SAML 2.0, OAuth, OIDC, Active Directory, LDAP, and PKI/CAC/PIV integrations. * Solid working knowledge of relational database management systems (Oracle, SQL Server, PostgreSQL) and SQL query writing. * Direct experience implementing SailPoint solutions within Federal/DoD ICAM programs or Zero Trust Architecture (ZTA) environments. * Experience with cloud platforms (AWS, Microsoft Azure, Google Cloud Platform) and containerized application deployments. * Familiarity with DevSecOps, automated CI/CD deployment pipelines, and version control systems (Git). * Hands-on integration experience pairing SailPoint with Privileged Access Management (PAM) tools (e.g., BeyondTrust) or Identity Providers (e.g. Ping, Entra ID) ## Description Capgemini Government Solutions (CGS) LLC Identity Governance and Administration (IGA) Engineer is responsible for designing, deploying, configuring, and supporting enterprise-wide Identity Governance and Administration (IGA) solutions using the SailPoint platform (IdentityIQ and/or Identity Security Cloud). This role plays a critical part in strengthening enterprise cybersecurity postures, automating the identity lifecycle (Joiner/Mover/Leaver workflows), enforcing Role-Based Access Control (RBAC), and aligning identity operations with federal mandates and Zero Trust Architecture (ZTA) initiatives. Working closely with security architects, systems administrators, and application owners, the SailPoint Engineer ensures seamless integration, compliance automation, and robust operational resilience., As Identity Governance and Administration (IGA) Engineer, you will be responsible for: * Design, configure, deploy, and maintain SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud platforms. Develop custom workflows, rules, forms, policies, and Beanshell/Java scripts. * Integrate enterprise applications, databases, directories (Active Directory, Entra ID, LDAP), and cloud services with SailPoint using out-of-the-box and custom web services/REST APIs/SCIM connectors. * Build and maintain automated provisioning and de-provisioning processes for Joiner, Mover, and Leaver (JML) events across hybrid infrastructures. * Configure and manage periodic access certification campaigns, entitlement catalog structures, and Separation of Duties (SoD) enforcement policies. * Support the design, implementation, and maintenance of Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models to reduce over-privileged user access. * Perform system health checks, performance tuning, patching, version upgrades, and database maintenance across non-production and production SailPoint environments. * Ensure SailPoint configurations align with DoD/Federal cybersecurity standards (STIG compliance, NIST SP 800-53 controls) and support Authority to Operate (ATO) assessments. * Serve as the senior technical escalation point for complex provisioning errors, identity synchronization bugs, connector failures, and performance bottlenecks. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)