Apply on Employer Site

Kentro · 6 hours ago

IGA Engineer (SailPoint), Zero Trust Program (USSOCOM TS/SCI)

Tampa, FL

Full-time

Onsite

Senior Level, Lead/Staff

10+ years exp

Kentro is a company committed to innovation and collaboration, seeking a highly skilled Identity Governance and Administration (IGA) Engineer to join the Zero Trust execution team at U.S. Special Operations Command (USSOCOM). This role is responsible for building and maintaining the 'source of truth' that governs access to critical data, implementing and configuring SailPoint across various networks.

Information Technology & Services

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

SailPoint Architecture & Configuration: Lead the design, deployment, and ongoing management of SailPoint IdentityNow (or IIQ) to automate the full identity lifecycle (Joiner, Mover, Leaver) across hybrid and on-premises environments

ABAC Attribute Management: Define and manage the schema for "Trust Attributes" (e.g., Clearance, COI, Project Codes) within SailPoint, ensuring they align with the NIST 8112 metadata standard for consumption by policy decision points

Air-Gapped Identity Operations: Manage the offline instance of SailPoint on the Top-Secret network, developing the workflows to import "Attribute Manifests" and ensure that identity data remains synchronized with the low-side source of truth

Access Certification: Configure and execute automated access certification campaigns for critical data repositories and privileged roles, ensuring compliance with DoD audit requirements

Role Modeling: Work with mission owners to define Technical Roles and Business Roles within SailPoint, replacing broad, static Active Directory groups with granular, policy-driven access roles

Qualification

SailPointIdentity Lifecycle ManagementActive DirectoryAttribute-Based Access ControlRole-Based Access ControlCompTIA Security+ CENIST 8112LDAPAzure Active DirectoryRESTSCIMSOAP

Required

Master's degree (MA/MS) in Computer Science, Information Security / Cybersecurity, Information Systems, Data Science, or a closely related technical field

10+ years of relevant experience

SailPoint Expertise: Extensive (5+ years) hands-on experience designing, implementing, and administering SailPoint (IdentityNow or IdentityIQ) in a large enterprise environment

Identity Lifecycle Management: Deep understanding of the Joiner-Mover-Leaver (JML) process and experience automating provisioning/deprovisioning workflows connected to HR systems and Active Directory

Directory Services: Strong knowledge of Active Directory, LDAP, and Azure Active Directory (Entra ID) structures and management

Governance Principles: Proven experience with Role-Based Access Control (RBAC) modeling, Separation of Duties (SoD) policy creation, and access certification campaigns

Required: CompTIA Security+ CE (or higher) to meet DoD 8570 IAT Level II requirements

Active Top-Secret clearance with SCI eligibility