Identity & Access Management Java & SailPoint Engineer

Title: Identity & Access Management Java & SailPoint Engineer

Location: Lansing, MI (Hybrid 3 days in week) – Local candidates only

Duration: Long Term

Visa - , GC

Interview – Webcam

Client – Michigan State University

Job Description:

The IAM Java & SailPoint Engineer is primarily a hands-on Java development role supporting MSU enterprise identity and access management (IAM) services. The contractor will develop, maintain, integrate, and modernize Java-based IAM applications and SailPoint Identity IQ (IIQ), sustain production operations, and support the IAM Modernization Program as identity workflows move from legacy services to the future-state IAM platform. Work includes My Identity/NGP go-live and operational support. The engineer must troubleshoot across the application stack; this is not a dedicated system administrator role.

Key responsibilities include:

Analyze, reverse engineer, refactor, develop, test, and maintain Java and BeanShell components; build and support Spring Boot services, REST APIs, and enterprise integrations.

Engineer and support SailPoint IIQ rules, workflows, connectors, provisioning policies, tasks, forms, certifications, attestations, reports, and application onboarding.

Maintain identity lifecycle workflows, provisioning, reconciliation, access governance, and integrations with HR/authoritative sources, directories, databases, cloud services, and enterprise applications.

Investigate production incidents end-to-end using Linux and application, middleware, and server logs. Diagnose Java deployments and runtime behavior; isolate faults across Java code, Tomcat/JBoss, databases, directory integrations, connectors, and dependent services.

Support platform upgrades, deployment and performance troubleshooting, stability improvements, technical debt reduction, and modernization/migration of IIQ workflows and integrations; support MyIdentity/NGP go-live and operations.

Apply secure engineering practices, unit/integration testing, code reviews, source control, CI/CD, monitoring, metrics, and tracing; document solutions and operational runbooks.

Collaborate with IAM engineers, architects, application owners, vendors, and stakeholders; provide status updates, estimates, incident communication, peer review, cross-training, and knowledge transfer.

Required candidate skills and experience:

Knowledge equivalent to a four-year degree in a related IT field and five to eight years of progressively responsible enterprise application/IAM experience, or an equivalent combination of education and experience.

Hands-on Java development, APIs and systems integration, software testing, secure coding, production support, root-cause troubleshooting, log analysis, technical documentation, and ability to work with technical and business teams.

Preferred qualifications:

Five to eight years of SailPoint IIQ engineering/administration; IIQ certification or comparable expertise; Java, BeanShell, Spring Boot, REST, XML, JSON, SQL, Git, and CI/CD.

Comfortable in Linux and with Tomcat/JBoss, Java application deployment/runtime, Kubernetes/OpenShift, middleware and application logs, performance tuning, high-availability operations, and occasional scheduled after-hours support.

Expected deliverables and outcomes:

Maintain and enhance supported Java/IAM and SailPoint IIQ services; resolve and document production defects and cross-stack incidents.

Deliver tested integrations and modernization/migration work, with technical designs, release documentation