| Location | Rockville, Maryland |
Hybrid Role - Ability to travel 20-40%, on average, to the DC area based on frequency of client meetings and level of project engagement required. Position Description: The SailPoint Senior Architect / Identity Governance and Administration (IGA) SME will serve as a senior technical authority responsible for the architecture, design, integration, enhancement, and operation of enterprise SailPoint IdentityIQ capabilities supporting a large federal customer. The Senior Architect will provide technical leadership for SailPoint-based credential and identity lifecycle management services operating within an AWS GovCloud / FedRAMP High environment, including identity aggregation and correlation, provisioning, access governance, entitlement certification, application integration, authoritative-source integration, and DHS Continuous Diagnostics and Mitigation (CDM) reporting. The individual will work closely with ICAM, PAM/CyberArk, cybersecurity, cloud, infrastructure, application, and operations teams to ensure the SailPoint environment is secure, scalable, highly available, auditable, and capable of meeting federal operational and security requirements.
Specific Duties to Perform / General Position Description: •Serve as a senior SailPoint IdentityIQ architect and IGA SME, providing architecture direction, solution design, technical governance, and Tier 3 engineering support. · Develop and maintain SailPoint architecture for a large, complex, multi-bureau federal environment, including appropriate separation and governance of bureau identity and entitlement data. · Architect and oversee SailPoint IdentityIQ workflows, identity lifecycle, provisioning, entitlement governance, recertification, correlation, reporting, and connector health. • Lead integrations with products such as HRConnect, USAccess, ITM, MuleSoft, WebTA, Concur, Active Directory, Azure, WC2-H, bureau applications, ServiceNow, and agency-specific authoritative/application sources. • Ensure continuous population and quality of DHS CDM Master User Record elements including TRUST, CRED, BEHAVE, and PRIV and support required audit/reporting data. • Provide architecture leadership for approval metadata, entitlements, NPE/service-account workflows, data integrity/correlation, reporting jobs, and application connectors. • Design for 99.9% availability, resilient operations, backup/restore, DR, patching, monitoring, and secure operation in AWS GovCloud FedRAMP High. • Coordinate SailPoint integration with CyberArk for privileged identity data and with Splunk/CloudWatch, ITSM, and agency security/monitoring services. • Lead Tier 3 troubleshooting, RCA, connector remediation, architecture reviews, technical documentation, runbooks/SOPs, and Federal workforce knowledge transfer. · Support cybersecurity and authorization activities including NIST 800-53/RMF, FISMA, FedRAMP High, vulnerability remediation, POA&M remediation, audit inquiries, and ATO maintenance. · Collaborating with client stakeholders, product owners, and technical teams to gather requirements, translate business needs into technical solutions, and manage scope, timelines, dependencies, and delivery quality · Provide technical leadership, code/configuration reviews, and mentoring to SailPoint engineers, developers, and administrators. · Support structured knowledge transfer to Federal personnel, including architecture, integrations, workflows, escalation procedures, and operational processes.
Position Qualifications/Experience/Education: Required Qualifications: • Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Systems, or related field; 10+ years of IAM/ICAM experience with 7+ years of deep SailPoint IdentityIQ engineering/architecture experience. • Expert knowledge of SailPoint IdentityIQ architecture, lifecycle workflows, provisioning, certifications/recertifications, roles/entitlements, connectors, correlation, reporting, and integrations. • Experience architecting SailPoint in large federal or comparable enterprise managed-service environments with complex authoritative sources and application connectors. • Experience with Active Directory/Azure, APIs/integration patterns, ServiceNow/ITSM, cloud-hosted federal systems, FISMA/RMF, and high-availability operations. • Ability to lead complex troubleshooting, connector design, data-quality remediation, technical reviews, and mentoring/knowledge transfer. • SailPoint IdentityIQ technical certification(s) appropriate to senior architecture/engineering responsibilities required or strongly preferred. • Ability to travel 20-40%, on average, to the DC area based on frequency of client meetings and level of project engagement required. Desired Qualifications: • Recent federal delivery experience integrating SailPoint IdentityIQ in a managed-service environment. • Experience with large SailPoint IIQ deployments. • Experience with DHS CDM/MUR requirements, AWS GovCloud, Splunk/CloudWatch, MuleSoft, and CyberArk integration. • CISSP, CCSP, or AWS certification. • Experience applying AI-assisted coding workflows or Model Context Protocol technologies within SailPoint implementations Competencies: • Strong communicator able to work effectively with agency stakeholders, bureau teams, technical teams, and vendors. • Highly organized and outcome-focused; able to manage competing priorities in a 24x7 managed-service environment. • Proactive problem-solver who can operate with limited direction and drive issues through resolution. • Comfortable in Agile/Scrum/Kanban and ITIL-aligned environments with disciplined change, incident, and problem management. • Adaptable to changing BPA Call priorities, security requirements, and SLA-driven delivery. · Effective written and verbal communication skills · Meticulous attention to detail and quality of work product · Ability to build and sustain professional relationships . Ability to lead projects or workstreams |