IAM Engineer

Job description:

The IAM Java & SailPoint Engineer is primarily a hands-on Java development role supporting MSU enterprise identity and access management (IAM) services. The contractor will develop, maintain, integrate, and modernize Java-based IAM applications and SailPoint IdentityIQ (IIQ), sustain production operations, and support the IAM Modernization Program as identity workflows move from legacy services to the future-state IAM platform. Work includes MyIdentity/NGP go-live and operational support. The engineer must troubleshoot across the application stack; this is not a dedicated system administrator role.

Key responsibilities include:

- Analyze, reverse engineer, refactor, develop, test, and maintain Java and BeanShell components; build and support Spring Boot services, REST APIs, and enterprise integrations.

- Engineer and support SailPoint IIQ rules, workflows, connectors, provisioning policies, tasks, forms, certifications, attestations, reports, and application onboarding.

- Maintain identity lifecycle workflows, provisioning, reconciliation, access governance, and integrations with HR/authoritative sources, directories, databases, cloud services, and enterprise applications.

- Investigate production incidents end-to-end using Linux and application, middleware, and server logs. Diagnose Java deployments and runtime behavior; isolate faults across Java code, Tomcat/JBoss, databases, directory integrations, connectors, and dependent services.

- Support platform upgrades, deployment and performance troubleshooting, stability improvements, technical debt reduction, and modernization/migration of IIQ workflows and integrations; support MyIdentity/NGP go-live and operations.

- Apply secure engineering practices, unit/integration testing, code reviews, source control, CI/CD, monitoring, metrics, and tracing; document solutions and operational runbooks.

- Collaborate with IAM engineers, architects, application owners, vendors, and stakeholders; provide status updates, estimates, incident communication, peer review, cross-training, and knowledge transfer.

Required candidate skills and experience:

- Knowledge equivalent to a four-year degree in a related IT field and five to eight years of progressively responsible enterprise application/IAM experience, or an equivalent combination of education and experience.

- Hands-on Java development, APIs and systems integration, software testing, secure coding, production support, root-cause troubleshooting, log analysis, technical documentation, and ability to work with technical and business teams.

Preferred qualifications:

- Ten years of SailPoint IIQ engineering/administration; IIQ certification or comparable expertise; Java, BeanShell, Spring Boot, REST, XML, JSON, SQL, Git, and CI/CD.

- Comfortable in Linux and with Tomcat/JBoss, Java application deployment/runtime, Kubernetes/OpenShift, middleware and application logs, performance tuning, high-availability operations, and occasional scheduled after-hours support.