Senior SailPoint Engineer/SME | Washington, DC | On-Site | Contingent

Ares Enterprise is seeking a Senior SailPoint Subject Matter Expert (SME) to support the Department of Justice (DOJ), Executive Office for United States Attorneys (EOUSA), Office of the Chief Information Officer (OCIO), Cybersecurity Services (CSS) Identity and Access Management (USAidam) Program in Washington, DC.

The Senior SailPoint SME will serve as the senior technical resource responsible for the design, architecture, development, maintenance, and optimization of the USAidgov SailPoint IdentityIQ (IIQ) environment . This individual will provide technical leadership for SailPoint development and operations, oversee code and workflow design, ensure system performance and reliability, and provide architectural and technical recommendations to Government Program and Project Managers.The Senior SailPoint SME will also lead and provide technical guidance to Junior SailPoint SMEs supporting the USAidam DevOps team and assist with complex technical issues escalated through the USAidam Helpdesk.

ESSENTIAL FUNCTIONS

• Serve as the senior technical authority for the design, architecture, development, maintenance, and enhancement of the USAidgov SailPoint IdentityIQ environment.
• Design and architect the overall SailPoint solution to ensure the environment is secure, efficient, reliable, scalable, and performant.
• Ensure the SailPoint database is appropriately backed up and support the overall reliability and performance of the SailPoint architecture.
• Take ownership of SailPoint code changes and ensure changes are independently validated and appropriately reviewed before incorporation into the overall system codebase.
• Provide technical and design oversight for SailPoint workflows supporting internal and external account-management functions.
• Design, develop, maintain, and enhance SailPoint workflows supporting user lifecycle management, entitlement provisioning, identity refreshes, aggregation tasks, provisioning, and deprovisioning .
• Oversee SailPoint daily processes and connectors and ensure synchronization, aggregation, and data-correlation issues are identified and resolved quickly.
• Configure and enhance integrations and connectors, including the SailPoint Okta Connector, SailPoint MasterAPI connections , and other data-ingestion mechanisms such as CSV imports and API calls.
• Support automated user provisioning and deprovisioning processes across USAidam-supported applications and environments.
• Develop and maintain integrations necessary to support centralized entitlement and role-based access management.
• Support development and execution of user recertification campaigns for privileged and unprivileged users, including customized certifier routing rules and Government-defined account selection criteria.
• Support implementation and maintenance of automated identity lifecycle and access-governance processes.
• Provide recommendations to Government PMs regarding SailPoint architecture, design strategy, system enhancements, and the applicability and effectiveness of new SailPoint feature releases.
• Lead and provide technical guidance, mentoring, and oversight to the Junior SailPoint SMEs supporting the USAidam DevOps team.
• Assist the USAidam Helpdesk and DevOps team with complex Tier 2/Tier 3 issues escalated for engineering support.
• Troubleshoot SailPoint workflows, connectors, integrations, scripts, synchronization processes, account provisioning, entitlement, and other identity-governance issues.
• Support integration between SailPoint and the broader USAidam technology environment, including Okta and external identity providers .
• Participate in design, development, testing, validation, User Acceptance Testing (UAT), deployment, and post-deployment support activities.
• Conduct or support smoke and regression testing for new builds, enhancements, workflows, integrations, and system releases.
• Ensure updated solutions are properly tested, validated, and receive Government approval prior to production deployment.
• Support system patching, updates, security maintenance, vulnerability remediation, and related operational activities.
• Develop and maintain technical documentation, system design documentation, testing plans, training materials, and other required system artifacts.
• Support Identity and Access reports, audit logs, certification campaigns, and other Government-directed identity governance requirements.
• Collaborate with Government stakeholders, application owners, USAidam engineers, Helpdesk personnel, and other technical teams to resolve issues and deliver secure identity-management capabilities.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Software Engineering, or a related technical discipline.
• SailPoint IdentityIQ certification or other relevant SailPoint technical certification.
• Experience supporting DOJ, EOUSA, or another Federal Government organization.
• Experience integrating SailPoint IdentityIQ with Okta .
• Experience with the SailPoint Okta Connector and/or SailPoint MasterAPI connector.
• Experience with Okta Identity Engine (OIE/IDaaS) and Okta Government environments.
• Experience with REST APIs, JSON, CSV-based integrations, and enterprise identity data exchanges.
• Experience developing or supporting AWS Lambda functions used for identity-management automation.
• Experience with PowerShell and other scripting or automation technologies.
• Experience with GitLab or comparable source-code management and CI/CD technologies.
• Experience working within a DevOps or DevSecOps development environment.
• Experience with modern authentication and federation standards, including SAML, OIDC, SCIM, PIV, and MFA .
• Knowledge of Privileged Access Management (PAM) and integration between identity governance and privileged account lifecycle management.
• Experience supporting Federal cloud or hybrid environments.
• Familiarity with Federal cybersecurity and identity-management requirements, including NIST, FedRAMP, Zero Trust Architecture, and the CISA Zero Trust Maturity Model .
• Experience supporting Security and Privacy Assessment & Authorization (SPA&A) and Federal system authorization activities.