Senior SailPoint Engineer/SME | Washington, DC | On-Site | Contingent

Ares-Enterprise; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

Ares Enterprise is seeking a Senior SailPoint Subject Matter Expert to lead the design, development, and operations of the USAidgov SailPoint IIQ environment in Washington, DC. You will guide junior SMEs, oversee workflows, and ensure secure identity governance across government applications.

The role requires deep SailPoint expertise, hands-on integration with Okta and MasterAPI, and experience in DevOps/DevSecOps within a federal context. A DoJ/EOUSA background is a plus.

Qualifications

• Bachelor's degree in a technical discipline.
• SailPoint IdentityIQ certification or equivalent.
• Experience supporting DOJ/EOUSA or a Federal government org.
• Experience integrating SailPoint IdentityIQ with Okta.
• Experience with Okta Identity Engine (OIE) and Gov environments.
• Experience with REST APIs, JSON, CSV integrations.
• Experience with AWS Lambda functions for identity automation.
• Experience with scripting/automation (PowerShell).
• Experience with GitLab/CI-CD in a DevOps/DevSecOps setting.
• Familiarity with NIST, FedRAMP, Zero Trust and SPA&A.

Responsibilities

• Serve as senior technical authority for design, architecture, development, and enhancement of the USAidgov SailPoint IIQ environment.
• Design and architect SailPoint solution for security, efficiency, reliability, scalability, and performance.
• Ensure SailPoint database backups and overall reliability of architecture.
• Own SailPoint code changes; ensure validation and proper review before integration.
• Provide design oversight for SailPoint workflows supporting account management.
• Develop and maintain workflows for lifecycle management and provisioning.
• Oversee daily SailPoint processes and connectors; resolve sync and data issues quickly.
• Configure integrations including Okta Connector and MasterAPI connections; CSV/API data ingestion.
• Support automated provisioning/deprovisioning across USAidam apps/environments.
• Lead and mentor Junior SailPoint SMEs; assist with complex Tier 2/3 issues.

Skills

SailPoint IdentityIQ

Okta integration

REST APIs

PowerShell

GitLab CI/CD

DevOps/DevSecOps

MFA/SSO (SAML/OIDC/SCIM)

PAM integration

Federal cloud environments

Identity governance

Education

Bachelor's degree in Computer Science or related

Tools

SailPoint IdentityIQ

Okta Connector

MasterAPI connector

AWS Lambda

GitLab

PowerShell

Job description

Description

Ares Enterprise is seeking a Senior SailPoint Subject Matter Expert (SME) to support the Department of Justice (DOJ), Executive Office for United States Attorneys (EOUSA), Office of the Chief Information Officer (OCIO), Cybersecurity Services (CSS) Identity and Access Management (USAidam) Program in Washington, DC.
The Senior SailPoint SME will serve as the senior technical resource responsible for the design, architecture, development, maintenance, and optimization of the USAidgov SailPoint IdentityIQ (IIQ) environment . This individual will provide technical leadership for SailPoint development and operations, oversee code and workflow design, ensure system performance and reliability, and provide architectural and technical recommendations to Government Program and Project Managers.The Senior SailPoint SME will also lead and provide technical guidance to Junior SailPoint SMEs supporting the USAidam DevOps team and assist with complex technical issues escalated through the USAidam Helpdesk.

ESSENTIAL FUNCTIONS

• Serve as the senior technical authority for the design, architecture, development, maintenance, and enhancement of the USAidgov SailPoint IdentityIQ environment.
• Design and architect the overall SailPoint solution to ensure the environment is secure, efficient, reliable, scalable, and performant.
• Ensure the SailPoint database is appropriately backed up and support the overall reliability and performance of the SailPoint architecture.
• Take ownership of SailPoint code changes and ensure changes are independently validated and appropriately reviewed before incorporation into the overall system codebase.
• Provide technical and design oversight for SailPoint workflows supporting internal and external account-management functions.
• Design, develop, maintain, and enhance SailPoint workflows supporting user lifecycle management, entitlement provisioning, identity refreshes, aggregation tasks, provisioning, and deprovisioning .
• Oversee SailPoint daily processes and connectors and ensure synchronization, aggregation, and data-correlation issues are identified and resolved quickly.
• Configure and enhance integrations and connectors, including the SailPoint Okta Connector, SailPoint MasterAPI connections , and other data-ingestion mechanisms such as CSV imports and API calls.
• Support automated user provisioning and deprovisioning processes across USAidam-supported applications and environments.
• Develop and maintain integrations necessary to support centralized entitlement and role-based access management.
• Support development and execution of user recertification campaigns for privileged and unprivileged users, including customized certifier routing rules and Government-defined account selection criteria.
• Support implementation and maintenance of automated identity lifecycle and access-governance processes.
• Provide recommendations to Government PMs regarding SailPoint architecture, design strategy, system enhancements, and the applicability and effectiveness of new SailPoint feature releases.
• Lead and provide technical guidance, mentoring, and oversight to the Junior SailPoint SMEs supporting the USAidam DevOps team.
• Assist the USAidam Helpdesk and DevOps team with complex Tier 2/Tier 3 issues escalated for engineering support.
• Troubleshoot SailPoint workflows, connectors, integrations, scripts, synchronization processes, account provisioning, entitlement, and other identity-governance issues.
• Support integration between SailPoint and the broader USAidam technology environment, including Okta and external identity providers .
• Participate in design, development, testing, validation, User Acceptance Testing (UAT), deployment, and post-deployment support activities.
• Conduct or support smoke and regression testing for new builds, enhancements, workflows, integrations, and system releases.
• Ensure updated solutions are properly tested, validated, and receive Government approval prior to production deployment.
• Support system patching, updates, security maintenance, vulnerability remediation, and related operational activities.
• Develop and maintain technical documentation, system design documentation, testing plans, training materials, and other required system artifacts.
• Support Identity and Access reports, audit logs, certification campaigns, and other Government-directed identity governance requirements.
• Collaborate with Government stakeholders, application owners, USAidam engineers, Helpdesk personnel, and other technical teams to resolve issues and deliver secure identity-management capabilities.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Software Engineering, or a related technical discipline.
• SailPoint IdentityIQ certification or other relevant SailPoint technical certification.
• Experience supporting DOJ, EOUSA, or another Federal Government organization.
• Experience integrating SailPoint IdentityIQ with Okta .
• Experience with the SailPoint Okta Connector and/or SailPoint MasterAPI connector.
• Experience with Okta Identity Engine (OIE/IDaaS) and Okta Government environments.
• Experience with REST APIs, JSON, CSV-based integrations, and enterprise identity data exchanges.
• Experience developing or supporting AWS Lambda functions used for identity-management automation.
• Experience with PowerShell and other scripting or automation technologies.
• Experience with GitLab or comparable source-code management and CI/CD technologies.
• Experience working within a DevOps or DevSecOps development environment.
• Experience with modern authentication and federation standards, including SAML, OIDC, SCIM, PIV, and MFA .
• Knowledge of Privileged Access Management (PAM) and integration between identity governance and privileged account lifecycle management.
• Experience supporting Federal cloud or hybrid environments.
• Familiarity with Federal cybersecurity and identity-management requirements, including NIST, FedRAMP, Zero Trust Architecture, and the CISA Zero Trust Maturity Model .
• Experience supporting Security and Privacy Assessment & Authorization (SPA&A) and Federal system authorization activities.