Location: Washington, DC (EOUSA Headquarters - On-site with potential for hybrid)
Clearance: Must be eligible for Common Access Card (CAC) / Public Trust; U.S. Citizenship required
Job Type: Full-time | Government Contract (Base Year + 4 Option Years)
Position Overview
We are seeking a highly experienced Senior SailPoint SME to design, architect, and maintain the USAidgov (SailPoint IdentityIQ) platform in support of the Executive Office for United States Attorneys (EOUSA). This role provides technical leadership for identity governance and administration, overseeing code development, workflow design, and system integrations. The ideal candidate has at least six years of hands-on experience developing code for and maintaining on-premises SailPoint installations, with a strong background in identity lifecycle management, connectors, and automation. This is a non-personal services contract position reporting directly to the Prime Contractor while receiving work direction from Government management.
Key Responsibilities
- Design and architect the overall USAidgov (SailPoint IdentityIQ) system, ensuring efficiency, performance, and robust database management
- Provide technical leadership and mentorship to a team of Junior SailPoint SMEs
- Develop and maintain SailPoint workflows supporting user lifecycle management, entitlement provisioning, identity refreshes, and aggregation tasks
- Configure and enhance SailPoint connectors, including Okta connectors, MasterAPI, and other data ingest mechanisms (CSV, API)
- Oversee code changes, ensuring independent validation and thorough code review before integration
- Design and execute privileged and unprivileged user recertification campaigns
- Implement and maintain custom AWS Lambda scripting to support IdAM business needs
- Support integrations between EOUSA's Okta tenants and the Department's DOJ Login system
- Troubleshoot sync and data correlation issues, ensuring daily SailPoint processes function correctly
- Provide recommendations to Government PMs on architecture, design strategy, and new feature efficacy
- Assist the helpdesk team with escalated tickets related to identity governance issues
- Ensure compliance with NIST, FISMA, and FedRAMP security and privacy requirements
Required Qualifications
- Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience)
- Minimum six years of experience developing code for and maintaining on-premises SailPoint IdentityIQ installations
- U.S. Citizenship required; ability to obtain and maintain a Common Access Card and Public Trust clearance
- Strong proficiency in Java, BeanShell, and SailPoint IIQ APIs
- Extensive experience with SailPoint workflows, rules, policies, and connectors
- Experience with identity lifecycle management, provisioning, and role-based access control
- Familiarity with cloud and hybrid computing environments (AWS, Lambda)
- Experience with identity federation protocols (SAML, OIDC, SCIM)
- Strong troubleshooting and problem-solving skills
- Excellent communication and documentation skills
Preferred Qualifications
- SailPoint Certified IdentityIQ Engineer or Architect
- Experience with Department of Justice or Federal law enforcement environments
- Experience with Okta Identity Engine and privileged access management solutions
- Knowledge of Zero Trust Architecture principles
- Experience with DevSecOps practices and CI/CD pipelines (GitLab, Jenkins)
Schedule & Work Conditions
- Core operating hours: 9:00 AM to 3:30 PM Eastern Time, Monday through Friday
- Primary place of performance: EOUSA Headquarters, 3CON Building, 175 N Street NE, Washington, DC
- Remote work may be authorized on a case-by-case basis
- Federal holidays observed
Equal Opportunity Employer
We are an equal opportunity employer and do not discriminate on the basis of race, color, religion, sex, gender identity, sexual orientation, national origin, genetics, disability, age, or veteran status.