SailPoint Support Engineer (REMOTE)

Koniag Government Services; Illinois; Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Paid time off

Paid parental leave

Life insurance

Disability insurance

Flexible spending accounts

Commuter benefits

Tuition reimbursement

Job summary

Koniag IT Systems, LLC, a Koniag Government Services company, seeks an experienced ICAM SailPoint Support Engineer to administer SailPoint IdentityIQ/Identity Security Cloud for government customers. The role emphasizes secure identity governance, provisioning, and compliance within federal standards.

Responsibilities include integrating SailPoint with apps, managing access certifications, and supporting Tier 2/3 ICAM issues while maintaining documentation and SOPs.

Qualifications

• Bachelor's degree required or equivalent experience accepted.
• 3+ years of hands-on SailPoint IIQ/ISC administration or similar IGA platform.
• Active Secret Clearance required.
• SailPoint certifications (e.g., IIQ/ISC or Identity Security Cloud) preferred.

Responsibilities

• Administer and support SailPoint platform, including identity lifecycle, RBAC, SO D policies, and provisioning workflows.
• Troubleshoot ICAM incidents and requests, meeting SLAs.
• Configure and maintain SailPoint ISC/IIQ features and automated provisioning.
• Integrate SailPoint with enterprise apps using REST, SCIM, and connectors.
• Onboard/offboard users, roles, and applications in SailPoint.
• Monitor system health, review logs, and address issues proactively.
• Support audits by generating access reports and certification campaigns.
• Create and maintain SOPs/runbooks for ICAM operations.
• Participate in change management and deploy SailPoint changes.

Skills

SailPoint platform

IGA concepts

RBAC/ABAC

NIST/Zero Trust

Active clearance

ITSM tooling

Education

Bachelor's degree (CS/IT/Cybersecurity)

Tools

SailPoint IdentityIQ

SailPoint Identity Security Cloud

SCIM/REST APIs

ServiceNow/Jira

AD/ LDAP connectors

Job description

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement.

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced ICAM SailPoint Support Engineer to join a team supporting Identity, Credential, and Access Management (ICAM) solutions for our government customers. The ideal candidate is a technically skilled professional with a strong background in identity and access management technologies, particularly within the SailPoint platform, and is passionate about delivering secure and reliable solutions in a federal environment.

Principal responsibilities will include but are not limited to:

• Provide day-to-day administration, configuration, and support of the SailPoint platform, including identity lifecycle management, role management, access certifications, and provisioning workflows.
• Troubleshoot and resolve ICAM-related incidents, service requests, and problems in a timely manner, adhering to established SLAs.
• Configure and maintain SailPoint Identity Security Cloud (ISC) or IdentityIQ (IIQ) features including access certifications, role-based access control (RBAC), separation of duties (SoD) policies, and automated provisioning/deprovisioning.
• Integrate SailPoint with enterprise applications, directories, and third‑party services using REST APIs, SCIM, and connector frameworks.
• Support the onboarding and offboarding of users, roles, and applications within the SailPoint environment.
• Monitor system health, review logs, and proactively identify and address potential issues within the ICAM ecosystem.
• Collaborate with security and compliance teams to ensure IAM configurations meet federal security standards and frameworks, including NIST guidelines and Zero Trust principles.
• Assist in the development and maintenance of technical documentation, standard operating procedures (SOPs), and runbooks related to ICAM and SailPoint operations.
• Participate in change management processes, including planning, testing, and implementing changes to the SailPoint environment.
• Support audits and compliance reviews by generating access reports, certification campaigns, and configuration documentation.
• Work with cross‑functional teams to evaluate and implement new SailPoint features and capabilities that align with mission requirements.
• Provide Tier 2/Tier 3 support for escalated identity governance and access management issues.

Education and Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field from an accredited college or university; equivalent work experience may be considered in lieu of a degree.
• 3+ years of hands‑on experience administering and supporting SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud (ISC), or a comparable Identity Governance and Administration (IGA) platform.
• Active Secret Clearance required.
• Relevant SailPoint certification(s) required (e.g., SailPoint Certified IdentityIQ Engineer, SailPoint Identity Security Cloud Engineer, or SailPoint Certified Administrator).

Required Skills and Competencies

• Exceptional communication skills in English – both written and oral – with the ability to communicate effectively with technical and non‑technical stakeholders.
• Hands‑on experience administering the SailPoint platform, including identity lifecycle management, access certifications, role management, provisioning workflows, and SoD policy enforcement.
• Strong understanding of Identity Governance and Administration (IGA) concepts including joiner/mover/leaver processes, RBAC, and entitlement management.
• Experience integrating SailPoint with Active Directory (AD), LDAP, and enterprise applications via native connectors or REST/SCIM APIs.
• Familiarity with ICAM frameworks, principles, and federal identity management standards (e.g., NIST SP 800-63, FICAM).
• Experience supporting users and applications in a ticketing/ITSM environment (e.g., ServiceNow, Jira).
• Ability to analyze and interpret system logs to diagnose and resolve identity governance and provisioning issues.
• Knowledge of role‑based access control (RBAC) and attribute‑based access control (ABAC) models and their implementation within SailPoint.
• Knowledge of Zero Trust Architecture principles and their application to identity governance and access management.
• Ability to create and maintain clear technical documentation, SOPs, and runbooks.
• Demonstrated ability to work both independently and collaboratively in a team environment.

Clearance Requirement

Active Secret Clearance

Desired Skills and Competencies

• Experience working in a federal government IT environment supporting ICAM programs.
• SailPoint Certified IdentityIQ Architect or SailPoint Identity Security Cloud Architect certification.
• Experience with SailPoint BeanShell/Java scripting for custom rule development and workflow configuration.
• Familiarity with Privileged Access Management (PAM) solutions and concepts, such as CyberArk or BeyondTrust.
• Experience with DevSecOps practices and CI/CD pipeline integrations involving identity services.
• Knowledge of cloud platforms such as AWS, Azure, or Google Cloud and their native IAM services.
• Experience with scripting languages (e.g., Python, PowerShell) for automation of identity management and provisioning tasks.
• Familiarity with additional IAM/ICAM platforms such as Okta, Ping Identity, or ForgeRock.
• Understanding of PIV/CAC authentication and its integration within federal environments.
• Experience supporting ATO (Authority to Operate) processes and contributing to security documentation such as System Security Plans (SSPs).
• CISSP, Security+, or other relevant cybersecurity certifications.

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer.

The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law.

We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution‑oriented business partnerships and a commitment to exceptional service delivery. We ensure long‑term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled.

Shareholder Preference in accordance with Public Law 88-352.