Identity Governance and Administration; IGA Engineer – SailPoint

Barbaricum is seeking an Identity Governance and Administration (IGA) Engineer to support identity lifecycle management within a USSOCOM Zero Trust program. This role will lead the deployment and administration of SailPoint identity governance platforms across classified and unclassified environments.

The selected candidate will implement identity lifecycle automation processes and ensure access to sensitive data is governed by dynamic, attribute-driven policies that align with Zero Trust principles.

• Deploy and administer SailPoint Identity Now or Identity IQ across enterprise environments.
• Design and automate identity lifecycle processes including Joiner, Mover, and Leaver (JML) workflows.
• Define and manage identity attribute schemas supporting Attribute-Based Access Control (ABAC) models.
• Implement access certification campaigns and governance processes to maintain compliance with audit requirements.
• Develop and maintain role-based and attribute-based access models within SailPoint.
• Integrate SailPoint with Active Directory, Azure Active Directory (Entra ), and enterprise applications.
• Support synchronization of identity data across classified and unclassified networks.

• Active DoD Top Secret clearance with SCI eligibility.
• Bachelor’s or Master’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 3–10 years of relevant experience (Journeyman) or 10+ years of experience (Senior).
• Hands‑on experience implementing and administering SailPoint identity governance solutions.
• Strong knowledge of Active Directory, LDAP, and Azure Active Directory structures and management.
• Experience implementing Role-Based Access Control (RBAC), Separation of Duties (SoD), and access certification processes.

• Experience implementing Attribute-Based Access Control (ABAC) strategies.
• Familiarity with DoD Identity, Credential, and Access Management (ICAM) architectures.
• Experience integrating identity systems using REST, SCIM, or SOAP APIs.
• Prior experience supporting USSOCOM or other DoD organizations.

• Required:
  
  CompTIA Security+ CE (DoD 8570 IAT Level II).
• Preferred:
  SailPoint Certified Identity Now Engineer or SailPoint Certified Identity IQ Engineer.
• Preferred:
  Certified Identity and Access Manager (CIAM) or Certified Information Systems Auditor (CISA).

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.