DevOps Automation Engineer

Capgemini Government Solutions; McLean (VA); Hybrid; USD 120,000 - 155,000; Full time

Benefits offered by this job

Healthcare including dental and vision

401(k) and Employee Share Ownership Plan

Paid parental leave

Family building benefits

Mentoring and coaching programs

Disaster Relief support

Job summary

Capgemini Government Solutions is seeking a highly motivated DevOps Automation Engineer to support the Department of Veterans Affairs. This senior-level role involves designing and implementing enterprise-wide identity management systems, bridging security and technical implementation while mentoring junior engineers.

The ideal candidate will have a Bachelor’s degree in Engineering or Computer Science and experience with cloud-based Identity Management. The position offers a competitive salary and various benefits including healthcare and paid time off.

Qualifications

• Ability to obtain and maintain a Tier 4 / High Risk background investigation.
• Proven multi-identity population design supporting distinct lifecycle rules.
• Expertise with designing and deploying access request, approvals, and SoD controls.

Responsibilities

• Design, implement, and govern identity management systems across environments.
• Bridge security strategy and technical implementation with junior engineers.
• Implement cloud-based IAM components with secure networking and logging.

Skills

Cloud-based Identity Management

Identity Governance and Administration

Automation for onboarding/offboarding

AI/ML in Identity Management

Legacy-to-modern integration

Security architecture knowledge

Education

Bachelor’s degree in Engineering, Computer Science, or related discipline

Tools

Saviynt

SailPoint

AWS

Job description

Capgemini Government Solutions (CGS) LLC is seeking a highly motivated DevOps Automation Engineer to join our Federal team supporting the Department of Veterans Affairs (VA) Identity, Credential, and Access Management (ICAM) program in the DC Metro Area. This senior-level technical role designs, implements, and governs enterprise-wide systems that manage user identities and access rights, bridging security strategy and technical implementation across on-premises and cloud environments while mentoring junior engineers.

Responsibilities

• Design, implement, and govern enterprise-wide identity and access management systems across on-premises and cloud environments
• Bridge security strategy and technical implementation, guiding junior engineers and collaborating with stakeholders to deliver secure, compliant, and scalable access solutions
• Implement and support cloud-based Identity Management and Access Governance products
• Lead legacy-to-modern integration using hybrid identity patterns (on-prem and cloud), directory consolidation, application modernization waves, and identity data quality remediation
• Design and deploy access requests, approvals, certifications, Separation of Duties (SoD) controls, role mining and role design, and connectors at scale
• Build and lead runbooks, a Level 1-Level 3 support model, SLAs, and audit-ready evidence for access governance and privileged access
• Implement IAM components in the cloud (e.g., AWS) with secure networking, logging, and deployment patterns
• Apply AI/ML-assisted analytics in Saviynt or similar IGA products (e.g., access anomaly detection, certification prioritization, identity risk scoring, and role/entitlement recommendations)

Required Qualifications

• Ability to obtain and maintain a Tier 4 / High Risk background investigation (High Risk Public Trust), as required for all task areas under this contract
• Bachelor’s degree in Engineering, Computer Science, Systems, Business, Information Systems, Information Resource Management, or a related scientific discipline
• Product certification(s), such as Saviynt, SailPoint, or equivalent
• Demonstrated healthcare IAM delivery across all three sectors: at least one State/Local public health or Medicaid/eligibility environment, one commercial payer/provider environment, and one Federal health (or Federal health-adjacent) environment, with references tied to measurable outcomes (e.g., application onboarding volume, MFA adoption, audit findings reduced)
• Proven multi-identity population design supporting employees, contractors, temporary staff, vendors, and affiliates/partners with distinct lifecycle rules, entitlements, and separation of duties
• Experience with agency/department partitioning, delegated administration, and policy differences across State/Local entities and Federal components
• Demonstrated automation for high-volume onboarding/offboarding of large contractor/temporary workforces (bulk onboarding, time-bound access, sponsor approvals)
• Expertise implementing and supporting cloud-based Identity Management and Access Governance products
• Expertise in legacy-to-modern integration, including hybrid identity patterns (on-prem and cloud), directory consolidation, application modernization waves, and identity data quality remediation
• Has led at least two IAM modernization or legacy migrations (e.g. AD/LDAP rationalization, custom IAM replacement, SSO federation rollout, provisioning modernization) with a clear cutover strategy (parallel run, staged migration, rollback)
• Operational expertise to build or lead runbooks, a Level 1-Level 3 support model, SLAs, and audit-ready evidence for access governance and privileged access
• Expertise with designing and deploying access request, approvals, certifications, SoD controls, role mining/role design, and connectors at scale
• Experience with applying AI/ML-assisted analytics in Saviynt and/or similar IGA products contexts (e.g., access anomaly detection, certification prioritization, identity risk scoring, role/entitlement recommendations)
• Expertise in cloud and directory and implemented IAM components in cloud (such as AWS) with secure networking, logging, and deployment patterns
• Expertise with the security architecture of the solution, including IAM, Cloud Security, API Security, and Data Security

Desired Qualifications

• Experience supporting the Department of Veterans Affairs (VA) or another large federal health agency
• Hands‑on experience with VA’s incumbent ICAM stack (e.g. Saviynt, CyberArk, Microsoft Entra ID, Okta, IBM Master Data Management)
• Master’s degree in a related field

Life at Capgemini

• Healthcare including dental, vision, mental health, and well-being programs
• Financial well-being programs such as 401(k) and Employee Share Ownership Plan
• Paid time off and paid holidays
• Paid parental leave
• Family building benefits like adoption assistance, surrogacy, and cryopreservation
• Social well-being benefits like subsidized back-up child/elder care and tutoring
• Mentoring, coaching and learning programs
• Employee Resource Groups
• Disaster Relief

Capgemini discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors that are considered in making compensation decisions including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority, performance, sales or revenue-based metrics, and business or organizational needs. At Capgemini, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $120K - $155K

This role may be eligible for other compensation including variable compensation, bonus, or commission. Full time regular employees are eligible for paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.