Engineer (IGA)

Guidehouse; Washington (District of Columbia); On-site; USD 113,000 - 188,000; Full time

Benefits offered by this job

Medical Insurance

Paid Holidays

Discretionary bonus

Parental Leave

401(k) Retirement Plan

Life Insurance

Health Savings Account

Educational Assistance

Learning & Certifications

Employee Referral Program

Corporate Sponsored Events

Emergency Backup Childcare

Mobility Stipend

Job summary

Guidehouse is seeking an experienced Identity Governance & Administration engineer to implement and maintain IGA solutions using Okta Identity Governance (OIG). You will build lifecycle automation, roles, and entitlements, and integrate SCIM/REST APIs for provisioning across teams.

Responsibilities include troubleshooting, data validation, and collaborating with security and business units to deliver scalable, policy-driven IGA processes.

Qualifications

• Minimum of THREE (3)+ years of overall work experience.
• Experience in IGA engineering, identity lifecycle automation, or a related identity/security engineering role.
• Hands-on experience with Okta Identity Governance (OIG) or similar IGA platforms.
• Experience building workflow automation, lifecycle processes, and identity governance solutions.
• Strong understanding of SCIM, REST/API integrations, entitlement management, and provisioning concepts.
• Experience configuring roles, dynamic groups, SoD policies, and access certification processes.
• Ability to troubleshoot provisioning, sync, and integration issues across identity systems.
• Experience performing identity data analysis, role mining, and data validation.
• Strong analytical, problem-solving, and communication skills.
• An ACTIVE and MAINTAINED "TOP SECRET" Federal or DoD security clearance.
• US Citizenship is contractually required.

Responsibilities

• Execute hands-on technical engineering for Identity Governance and Administration (IGA) solutions, primarily using Okta Identity Governance (OIG).
• Build lifecycle automation rules and workflows, including Joiner-Mover-Leaver processes, approvals, and identity lifecycle automation.
• Implement SCIM connectors, REST/API integrations, and entitlement catalogs to support secure provisioning and deprovisioning.
• Configure roles, dynamic groups, Separation of Duties (SOD) policies and rules, and access certification logic.
• Perform troubleshooting for provisioning, synchronization, and connector issues.
• Conduct role mining and identity data validation to improve data quality and governance outcomes.
• Analyze identity data and support the development of scalable, policy-driven identity governance processes.
• Collaborate with security, application, infrastructure, and business teams to translate requirements into working IGA solutions.

Skills

IGA engineering

Identity lifecycle automation

Okta Identity Governance

Workflow automation

SCIM

REST/APIs

Provisioning concepts

Troubleshooting

Data analysis

Communication skills

Security clearance

US Citizenship

Tools

Okta Identity Governance (OIG)

SCIM connectors

REST/API integrations

Job description

• Execute hands-on technical engineering for Identity Governance and Administration (IGA) solutions, primarily using Okta Identity Governance (OIG).
• Build lifecycle automation rules and workflows, including Joiner-Mover-Leaver processes, approvals, and identity lifecycle automation.
• Implement SCIM connectors, REST/API integrations, and entitlement catalogs to support secure provisioning and deprovisioning.
• Configure roles, dynamic groups, Separation of Duties (SOD) policies and rules, and access certification logic.
• Perform troubleshooting for provisioning, synchronization, and connector issues.
• Conduct role mining and identity data validation to improve data quality and governance outcomes.
• Analyze identity data and support the development of scalable, policy-driven identity governance processes.
• Collaborate with security, application, infrastructure, and business teams to translate requirements into working IGA solutions.

Job Family

Cyber Consulting

Travel Required

Up to 10%

Clearance Required

Active Top Secret (TS)

What You Will Do

• Execute hands-on technical engineering for Identity Governance and Administration (IGA) solutions, primarily using Okta Identity Governance (OIG).
• Build lifecycle automation rules and workflows, including Joiner-Mover-Leaver processes, approvals, and identity lifecycle automation.
• Implement SCIM connectors, REST/API integrations, and entitlement catalogs to support secure provisioning and deprovisioning.
• Configure roles, dynamic groups, Separation of Duties (SOD) policies and rules, and access certification logic.
• Perform troubleshooting for provisioning, synchronization, and connector issues.
• Conduct role mining and identity data validation to improve data quality and governance outcomes.
• Analyze identity data and support the development of scalable, policy-driven identity governance processes.
• Collaborate with security, application, infrastructure, and business teams to translate requirements into working IGA solutions.

What You Will Need

• Minimum of THREE (3)+ years of overall work experience.
• Experience in IGA engineering, identity lifecycle automation, or a related identity/security engineering role.
• Hands-on experience with Okta Identity Governance (OIG) or similar IGA platforms.
• Experience building workflow automation, lifecycle processes, and identity governance solutions.
• Strong understanding of SCIM, REST/API integrations, entitlement management, and provisioning concepts.
• Experience configuring roles, dynamic groups, SoD policies, and access certification processes.
• Ability to troubleshoot provisioning, sync, and integration issues across identity systems.
• Experience performing identity data analysis, role mining, and data validation.
• Strong analytical, problem-solving, and communication skills.
• An ACTIVE and MAINTAINED "TOP SECRET" Federal or DoD security clearance.
• US Citizenship is contractually required.

What Would Be Nice To Have

• Experience implementing or supporting enterprise identity governance programs at scale.
• Prior experience with additional identity platforms, directories, or cloud security tools.
• Knowledge of compliance, audit, and access review processes in regulated environments.
• Familiarity with Zero Trust principles and identity domain best practices.
• Certifications in identity, cybersecurity, or cloud platforms.

The annual salary range for this position is $113,000.00-$188,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits Include

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Position may be eligible for a discretionary variable incentive bonus
• Parental Leave and Adoption Assistance
• 401(k) Retirement Plan
• Basic Life & Supplemental Life
• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Student Loan PayDown
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Employee Referral ProgramCorporate Sponsored Events & Community Outreach
• Emergency Back-Up Childcare Program
• Mobility Stipend

About Guidehouse

Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at [e-mail]. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.