Job Summary:
Capgemini Government Solutions (CGS) LLC is seeking a highly motivated DevOps Automation Engineer to join their Federal team supporting the Department of Veterans Affairs (VA) Identity, Credential, and Access Management (ICAM) program. This senior-level technical role involves designing, implementing, and governing enterprise-wide systems for managing user identities and access rights while mentoring junior engineers.
Responsibilities:
• Design, implement, and govern enterprise-wide identity and access management systems across on-premises and cloud environments
• Bridge security strategy and technical implementation, guiding junior engineers and collaborating with stakeholders to deliver secure, compliant, and scalable access solutions
• Implement and support cloud-based Identity Management and Access Governance products
• Lead legacy-to-modern integration using hybrid identity patterns (on-prem and cloud), directory consolidation, application modernization waves, and identity data quality remediation
• Design and deploy access requests, approvals, certifications, Separation of Duties (SoD) controls, role mining and role design, and connectors at scale
• Build and lead runbooks, a Level 1-Level 3 support model, SLAs, and audit-ready evidence for access governance and privileged access
• Implement IAM components in the cloud (e.g., AWS) with secure networking, logging, and deployment patterns
• Apply AI/ML-assisted analytics in Saviynt or similar IGA products (e.g., access anomaly detection, certification prioritization, identity risk scoring, and role/entitlement recommendations)
Qualifications:
Required:
• U.S. Citizenship
• Ability to obtain and maintain a Tier 4 / High Risk background investigation (High Risk Public Trust), as required for all task areas under this contract
• Bachelor’s degree in Engineering, Computer Science, Systems, Business, Information Systems, Information Resource Management, or a related scientific discipline
• Product certification(s), such as Saviynt, SailPoint, or equivalent
• Demonstrated healthcare IAM delivery across all three sectors: at least one State/Local public health or Medicaid/eligibility environment, one commercial payer/provider environment, and one Federal health (or Federal health-adjacent) environment, with references tied to measurable outcomes (e.g., application onboarding volume, MFA adoption, audit findings reduced)
• Proven multi-identity population design supporting employees, contractors, temporary staff, vendors, and affiliates/partners with distinct lifecycle rules, entitlements, and separation of duties
• Experience with agency/department partitioning, delegated administration, and policy differences across State/Local entities and Federal components
• Demonstrated automation for high-volume onboarding/offboarding of large contractor/temporary workforces (bulk onboarding, time-bound access, sponsor approvals)
• Expertise implementing and supporting cloud-based Identity Management and Access Governance products
• Expertise in legacy-to-modern integration, including hybrid identity patterns (on-prem and cloud), directory consolidation, application modernization waves, and identity data quality remediation
• Has led at least two IAM modernization or legacy migrations (e.g., AD/LDAP rationalization, custom IAM replacement, SSO federation rollout, provisioning modernization) with a clear cutover strategy (parallel run, staged migration, rollback)
• Operational expertise to build or lead runbooks, a Level 1-Level 3 support model, SLAs, and audit-ready evidence for access governance and privileged access
• Expertise with designing and deploying access request, approvals, certifications, SoD controls, role mining/role design, and connectors at scale
• Experience with applying AI/ML-assisted analytics in Saviynt and/or similar IGA products contexts (e.g., access anomaly detection, certification prioritization, identity risk scoring, role/entitlement recommendations)
• Expertise in cloud and directory and implemented IAM components in cloud (such as AWS) with secure networking, logging, and deployment patterns
• Expertise with the security architecture of the solution, including IAM, Cloud Security, API Security, and Data Security
Preferred:
• Experience supporting the Department of Veterans Affairs (VA) or another large federal health agency
• Hands-on experience with VA’s incumbent ICAM stack (e.g. Saviynt, CyberArk, Microsoft Entra ID, Okta, IBM Master Data Management)
• Master’s degree in a related field
Company:
Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. Founded in 2001, the company is headquartered in Auckland, NZL, with a team of 10001+ employees. The company is currently Late Stage.