SailPoint Lead Engineer

Job Summary: As a SailPoint Senior Systems Engineer, you'll play a key role in enhancing our cybersecurity and identity management capabilities. You'll coordinate with external stakeholders, including DHS CISA integrators, to implement the Identity Lifecycle Management (ILM)/Mandatory User Re-Authentication (MUR) solutions at the Department of Transportation (DOT). This involves integrating DOT's SailPoint infrastructure with the ServiceNow environment and maintaining the ILM solution across development, testing, and production environments. Your responsibilities will also include supporting ILM workflows for Privileged Account Management (PAM) tools and Active Directory (AD), building new system connections, and maintaining Continuous Diagnostics and Mitigation (CDM) Dashboard integrations.

You'll be responsible for deploying software updates, reporting on SailPoint IdentityIQ operations, and supporting the identification and remediation of security vulnerabilities. This position requires providing on-call and after-hours support, participating in annual Disaster Recovery testing, documenting recovery plans, and offering subject matter expertise to recommend and implement improvements. You'll ensure compliance with DOT processes for change management and enhance reporting capabilities, ensuring data integrity for CDM dashboard compliance per DHS CISA requirements. Join us to support critical cybersecurity initiatives and contribute to a secure, efficient IT infrastructure at the DOT.

Top Qualifications, Skills, Experience or Certifications: 

1. Bachelors and fourteen (14) years or more experience; Masters and twelve (12) years or more experience; PhD or JD and nine (9) years or more experience

2. 18+ years of experience strongly preferred

3. Must have a minimum of 8 years of related experience providing business solutions engineering support, to include architectural design, engineering design, proof of concept development, pilots, analysis, results, and documentation.

4. Performs day-to-day activities required to assist and identify technology solutions that meet enterprise requirements. Maps functional requirements into technological requirements, and identifies technologies that meet the technological requirements.  Conducts proof of concept, pilots and demos for the purposes of evaluating the suitability of given technologies for meeting requirements.  Evaluates the tradeoffs between competing solutions and develops quantitative driven analysis of alternatives.  Produces written analysis of research and recommendation papers that clearly describe the process followed, alternatives considered, evaluation criteria and rationale for recommendation and need for additional work.

Job Role Specific Requirements:

Core responsibilities and duties; highlight day-to-day activities:

1. SailPoint Certification Requirement: SailPoint Certified IdentityIQ Engineer certification, demonstrating a high level of expertise and proficiency in the SailPoint IdentityIQ platform.

2. Experience in Integrated Lifecycle Management: Three years of experience in designing and implementing integrated lifecycle management processes within an enterprise of the Department of Transportation's (DOT) scale, specifically supporting SailPoint initiatives. This experience should highlight the candidate's ability to manage identity solutions effectively in large, complex environments.

3. SailPoint System Administration Expertise: Three years of hands-on system administration experience with SailPoint, including the integration and configuration with Active Directory and HR systems within an enterprise comparable to the DOT. This experience is crucial for ensuring seamless identity management and security across the organization.

Preferred skills and qualifications:

1. SailPoint and CyberArk Integration Proficiency: Working knowledge of integrating SailPoint with CyberArk, enabling secure and efficient management of privileged accounts and enhancing organizational security posture.

2. Connector/Integration Maintenance Skills: The ability to troubleshoot and maintain SailPoint connectors and integrations is essential. Candidates must demonstrate skill in ensuring smooth interoperability between SailPoint and other critical systems, maintaining high availability and performance.

3. Comprehensive Active Directory Expertise: Applicants are expected to have a strong working knowledge of both the front-end aspects of Active Directory (such as account management and Group Policy) and the back-end components (including AD Schema, PKI, and PowerShell scripting). This comprehensive understanding is crucial for effective identity and access management.

4. Database Management and Modeling Skills: A general working knowledge of databases is required, with a focus on SQL Server 2019. This includes experience with backups, indexing, integrity checks, installation and configuration, understanding of ports and protocols, creating maintenance plans, and troubleshooting. Additionally, candidates should have experience in data modeling and schema, with the ability to understand and navigate Entity Relationship Diagrams, facilitating effective database management and optimization.

Note: Candidate must be a U.S. citizen or green card holder who has resided in the U.S. for at least 3 years and the ability to obtain a public trust