IAM & SailPoint Engineer

Job description:

The IAM Java & SailPoint Engineer is primarily a hands-on Java development role supporting MSU enterprise identity and access management (IAM) services. The contractor will develop, maintain, integrate, and modernize Java-based IAM applications and SailPoint IdentityIQ (IIQ), sustain production operations, and support the IAM Modernization Program as identity workflows move from legacy services to the future-state IAM platform. Work includes MyIdentity/NGP go-live and operational support. The engineer must troubleshoot across the application stack; this is not a dedicated system administrator role.

Key responsibilities include:

• Analyze, reverse engineer, refactor, develop, test, and maintain Java and BeanShell components; build and support Spring Boot services, REST APIs, and enterprise integrations.
• Engineer and support SailPoint IIQ rules, workflows, connectors, provisioning policies, tasks, forms, certifications, attestations, reports, and application onboarding.
• Maintain identity lifecycle workflows, provisioning, reconciliation, access governance, and integrations with HR/authoritative sources, directories, databases, cloud services, and enterprise applications.
• Investigate production incidents end-to-end using Linux and application, middleware, and server logs. Diagnose Java deployments and runtime behavior; isolate faults across Java code, Tomcat/JBoss, databases, directory integrations, connectors, and dependent services.
• Support platform upgrades, deployment and performance troubleshooting, stability improvements, technical debt reduction, and modernization/migration of IIQ workflows and integrations; support MyIdentity/NGP go-live and operations.
• Apply secure engineering practices, unit/integration testing, code reviews, source control, CI/CD, monitoring, metrics, and tracing; document solutions and operational runbooks.
• Collaborate with IAM engineers, architects, application owners, vendors, and stakeholders; provide status updates, estimates, incident communication, peer review, cross-training, and knowledge transfer.

Required candidate skills and experience:

• Knowledge equivalent to a four-year degree in a related IT field and five to eight years of progressively responsible enterprise application/IAM experience, or an equivalent combination of education and experience.
• Hands-on Java development, APIs and systems integration, software testing, secure coding, production support, root-cause troubleshooting, log analysis, technical documentation, and ability to work with technical and business teams.

Preferred qualifications:

• Five to eight years of SailPoint IIQ engineering/administration; IIQ certification or comparable expertise; Java, BeanShell, Spring Boot, REST, XML, JSON, SQL, Git, and CI/CD.
• Comfortable in Linux and with Tomcat/JBoss, Java application deployment/runtime, Kubernetes/OpenShift, middleware and application logs, performance tuning, high-availability operations, and occasional scheduled after-hours support.