Remote IGA Engineer - Identity & Access Automation

System One, Inc.; Herndon (VA); Remote; USD 100,000 - 200,000; Full time

Benefits offered by this job

Health and welfare benefits

401(k) plan

Job summary

System One is seeking an IGA Operations Engineer in Herndon, VA to design, deploy, and operate identity governance platforms, automate provisioning, and enforce security policies.

You will optimize RBAC, manage AD/Azure AD, develop connectors, and troubleshoot incidents while collaborating with security and IT teams. This role emphasizes DevOps, CI/CD, and documentation to support scalable identity services.

Qualifications

• Experience implementing IAM/IGA solutions with SailPoint.
• Proficient in Active Directory and Azure AD administration.
• Skilled in scripting with PowerShell, BeanShell, and REST APIs.
• Strong understanding of security standards (SAML, OAuth) and regulatory compliance.
• Experience with DevOps practices and CI/CD pipelines.

Responsibilities

• Design, implement, and maintain identity governance platforms to automate provisioning and compliance.
• Ensure secure access, manage Active Directory and troubleshoot production issues.
• Monitor IGA platforms for availability, performance, and security.
• Automate joiner/mover/leaver processes across enterprise systems.
• Define RBAC models and conduct access certification campaigns.
• Develop connectors for applications, databases, and directories.
• Investigate and resolve production incidents related to identity services.
• Create architectural diagrams, design specifications, and test cases.

Skills

SailPoint

Active Directory

Azure AD

PowerShell

BeanShell

REST APIs

CI/CD

Tools

SailPoint

Job description

Job Title: IGA Operations Engineer
Location: Herndon, Virginia
Type: Direct Hire
Compensation: $100,000.00 - $200,000.00
Work Model: Remote – offsite
Hours: 40.0

Responsibilities

• Design, implement, and maintain identity lifecycle management platforms (e.g., SailPoint) to automate user provisioning, access requests, and compliance certifications.
• Ensure secure access, manage Active Directory, and troubleshoot production issues to align with security policies.
• Monitor and maintain IGA platform to ensure high availability, performance, and security.
• Automate joiner, mover, and leaver (JML) processes to manage user provisioning/deprovisioning across enterprise systems.
• Define Role-Based Access Control (RBAC) models and conduct access certification campaigns to ensure compliance with policies.
• Develop connectors for applications, databases, and directories to enhance system interoperability.
• Investigate and resolve production incidents related to identity services.
• Create technical documentation, including architectural diagrams, design specifications, and test cases.

Requirements

• Proficiency in IAM tools (SailPoint), directory services (Active Directory, Azure AD), and scripting languages (e.g., PowerShell, BeanShell, REST APIs).
• Understanding of security protocols (SAML, OIDC, OAuth2) and regulatory compliance requirements.
• Proven experience in IAM/IGA implementation, DevOps principles, and CI/CD pipelines.
• Strong collaboration skills to work with security, IT, and business stakeholders.

System One, and its subsidiaries including Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#LI-MB1
Ref: #851-Rockville-S1