IAM Java & SailPoint Engineer

Lancesoft; Lansing (MI); On-site; USD 96,000 - 110,000; Full time

Job summary

Michigan State University seeks an IAM Java & SailPoint Engineer to develop and modernize Java-based IAM applications and SailPoint IIQ, support production operations, and contribute to the IAM Modernization Program as identity workflows move to a future-state platform.

The role involves troubleshooting across the application stack, supporting go-live events, and collaborating with IAM engineers, architects, and stakeholders to deliver secure, reliable identity services.

Qualifications

• Knowledge equivalent to a four-year degree in a related IT field and five to eight years of progressively responsible enterprise application/IAM experience.
• Hands-on Java development, APIs and systems integration, software testing, secure coding, production support, root-cause troubleshooting, log analysis, technical documentation, and ability to work with technical and business teams.

Responsibilities

• Analyze, reverse engineer, refactor, develop, test, and maintain Java and BeanShell components; build and support Spring Boot services, REST APIs, and enterprise integrations.
• Engineer and support SailPoint IIQ rules, workflows, connectors, provisioning policies, tasks, forms, certifications, attestations, reports, and application onboarding.
• Maintain identity lifecycle workflows, provisioning, reconciliation, access governance, and integrations with HR/authoritative sources, directories, databases, cloud services, and enterprise applications.
• Investigate production incidents end-to-end using Linux and application, middleware, and server logs.
• Diagnose Java deployments and runtime behavior; isolate faults across Java code, Tomcat/JBoss, databases, directory integrations, connectors, and dependent services.
• Support platform upgrades, deployment and performance troubleshooting, stability improvements, technical debt reduction, and modernization/migration of IIQ workflows and integrations; support My Identity/NGP go-live and operations.
• Apply secure engineering practices, unit/integration testing, code reviews, source control, CI/CD, monitoring, metrics, and tracing, document solutions and operational runbooks.
• Collaborate with IAM engineers, architects, application owners, vendors, and stakeholders; provide status updates, estimates, incident communication, peer review, cross-training, and knowledge transfer.

Skills

Java development

APIs

Systems integration

Software testing

Secure coding

Production support

Root-cause troubleshooting

Log analysis

Technical documentation

Cross-team collaboration

Education

Bachelor's degree or equivalent in IT related field

Tools

SailPoint IIQ

Spring Boot

REST

XML

JSON

SQL

Git

CI/CD

Kubernetes/OpenShift

Job description

Client: Michigan State University

Title: IAM Java & SailPoint Engineer

Duration: 11/2026 –6/30/2027 (Renewable)

Location: 4000 Collins Road, Lansing, MI - 48910

Pay Range: $70.00 to $80.00 negotiable.

The IAM Java & SailPoint Engineer is primarily a hands-on Java development role supporting MSU enterprise identity and access management (IAM) services. The contractor will develop, maintain, integrate, and modernize Java-based IAM applications and SailPoint IdentityIQ (IIQ), sustain production operations, and support the IAM Modernization Program as identity workflows move from legacy services to the future-state IAM platform. Work includes My Identity/NGP go-live and operational support. The engineer must troubleshoot across the application stack;this is not a dedicated system administrator role.

Key responsibilities include:

• Analyze, reverse engineer, refactor, develop, test, and maintain Java and BeanShell components;build and support Spring Boot services, REST APIs, and enterprise integrations.
• Engineer and support SailPoint IIQ rules, workflows, connectors, provisioning policies, tasks, forms, certifications, attestations, reports, and application onboarding.
• Maintain identity lifecycle workflows, provisioning, reconciliation, access governance, and integrations with HR/authoritative sources, directories, databases, cloud services, and enterprise applications.
• Investigate production incidents end-to-end using Linux and application, middleware, and server logs.
• Diagnose Java deployments and runtime behavior;isolate faults across Java code, Tomcat/JBoss, databases, directory integrations, connectors, and dependent services.
• Support platform upgrades, deployment and performance troubleshooting, stability improvements, technical debt reduction, and modernization/migration of IIQ workflows and integrations;support My Identity/NGP go-live and operations.
• Apply secure engineering practices, unit/integration testing, code reviews, source control, CI/CD, monitoring, metrics, and tracing, document solutions and operational runbooks.
• Collaborate with IAM engineers, architects, application owners, vendors, and stakeholders;provide status updates, estimates, incident communication, peer review, cross-training, and knowledge transfer.

Required candidate skills and experience:

• Knowledge equivalent to a four-year degree in a related IT field and five to eight years of progressively responsible enterprise application/IAM experience, or an equivalent combination of education and experience.
• Hands-on Java development, APIs and systems integration, software testing, secure coding, production support, root-cause troubleshooting, log analysis, technical documentation, and ability to work with technical and business teams.

Preferred qualifications:

• Five to eight years of SailPoint IIQ engineering/administration;IIQ certification or comparable expertise;
• Java, BeanShell, Spring Boot, REST, XML, JSON, SQL, Git, and CI/CD.
• Comfortable in Linux and with Tomcat/JBoss, Java application deployment/runtime, Kubernetes/OpenShift, middleware and application logs, performance tuning, high-availability operations, and occasional scheduled after-hours support.

Expected deliverables and outcomes:

• Maintain and enhance supported Java/IAM and SailPoint IIQ services;resolve and document production defects and cross-stack incidents.
• Deliver tested integrations and modernization/migration work, with technical designs, release documentation, runbooks, and knowledge transfer to MSU staff.