ICAM Engineer - Identity Governance

About the position GDIT is in search of an ICAM Engineer - Identity Governance to support a large line of business within GDIT that delivers enterprise-scale Identity, Credential, and Access Management (ICAM) capabilities. This role supports the DoW ICAM mission by designing, developing, integrating, and maintaining identity governance solutions in highly secure environments. The ideal candidate is a senior hands-on SailPoint developer with strong Java experience who thrives in fast-paced, mission-critical environments and enjoys solving complex identity and access challenges. This is a Hybrid role. Selected candidate will support operations on-site at our Fort Meade, MD facility an estimated 25% of the week and tele-work the remainder. MEANINGFUL WORK AND PERSONAL IMPACT: Design, develop, configure, and maintain SailPoint IdentityIQ (IIQ) solutions supporting DoD enterprise ICAM requirements. Develop and customize SailPoint components, including workflows, rules, connectors, aggregation logic, and provisioning policies. Implement Java- and BeanShell-based customizations to extend SailPoint functionality. Integrate SailPoint with enterprise systems such as Active Directory, LDAP directories, HR systems, and downstream applications. Support identity lifecycle management (Joiner/Mover/Leaver), access certifications, role modeling, and segregation of duties (SoD) use cases. Troubleshoot and resolve complex production issues related to identity data, provisioning, and system performance. Collaborate with architects, system engineers, and security teams to implement scalable and secure ICAM solutions. Produce clear technical documentation and support Agile delivery practices. Actively manage technical risks and contribute to continuous improvement efforts. WHAT YOU WILL NEED TO BE SUCCESSFUL – REQUIRED: Education: Bachelor’s Degree in a related technical discipline. An additional 4 years of experience may be substituted in lieu of degree. Clearance: Minimum of an active Secret security clearance. Certification: DoD 8570/8140 IAT Level II certification (Security+ CE or higher). Experience: Minimum of 8 years’ experience as a software developer or systems engineer in a government or regulated environment. Required Skills and Abilities: Extensive hands-on SailPoint IdentityIQ development experience. Strong Java development experience, including customization of enterprise COTS platforms. Experience with scripting languages such as BeanShell and JavaScript. Proven experience integrating COTS products in secure customer environments. Experience with Unix/Linux based operating systems (DoD or enterprise environment). Experience with container technologies (Docker and/or Kubernetes). Experience working in Agile development environments and using associated tools. Strong written and verbal communication skills with the ability to explain complex technical concepts clearly. Self-starter capable of driving complex tasks to completion in a fast-moving environment.

Responsibilities

• Design, develop, configure, and maintain SailPoint IdentityIQ (IIQ) solutions supporting DoD enterprise ICAM requirements.
• Develop and customize SailPoint components, including workflows, rules, connectors, aggregation logic, and provisioning policies.
• Implement Java- and BeanShell-based customizations to extend SailPoint functionality.
• Integrate SailPoint with enterprise systems such as Active Directory, LDAP directories, HR systems, and downstream applications.
• Support identity lifecycle management (Joiner/Mover/Leaver), access certifications, role modeling, and segregation of duties (SoD) use cases.
• Troubleshoot and resolve complex production issues related to identity data, provisioning, and system performance.
• Collaborate with architects, system engineers, and security teams to implement scalable and secure ICAM solutions.
• Produce clear technical documentation and support Agile delivery practices.
• Actively manage technical risks and contribute to continuous improvement efforts.

Requirements

• Bachelor’s Degree in a related technical discipline. An additional 4 years of experience may be substituted in lieu of degree.
• Minimum of an active Secret security clearance.
• DoD 8570/8140 IAT Level II certification (Security+ CE or higher).
• Minimum of 8 years’ experience as a software developer or systems engineer in a government or regulated environment.
• Extensive hands-on SailPoint IdentityIQ development experience.
• Strong Java development experience, including customization of enterprise COTS platforms.
• Experience with scripting languages such as BeanShell and JavaScript.
• Proven experience integrating COTS products in secure customer environments.
• Experience with Unix/Linux based operating systems (DoD or enterprise environment).
• Experience with container technologies (Docker and/or Kubernetes).
• Experience working in Agile development environments and using associated tools.
• Strong written and verbal communication skills with the ability to explain complex technical concepts clearly.
• Self-starter capable of driving complex tasks to completion in a fast-moving environment.

Benefits

• Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
• To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.

Apply tot his job Apply To this Job