DevOps Automation Engineer

Capgemini Government Solutions (CGS) LLC is seeking a highly motivated DevOps

Automation Engineer to join our Federal team supporting the Department of

Veterans Affairs (VA) Identity, Credential, and Access Management (ICAM) program

in the DC Metro Area. This senior-level technical role designs, implements, and

governs enterprise-wide systems that manage user identities and access rights,

bridging security strategy and technical implementation across on-premises and

cloud environments while mentoring junior engineers.

The successful candidate will be responsible for activities, such as:

* Design, implement, and govern enterprise-wide identity and access management

systems across on-premises and cloud environments

* Bridge security strategy and technical implementation, guiding junior

engineers and collaborating with stakeholders to deliver secure, compliant,

and scalable access solutions

* Implement and support cloud-based Identity Management and Access Governance

products

* Lead legacy-to-modern integration using hybrid identity patterns (on-prem and

cloud), directory consolidation, application modernization waves, and

identity data quality remediation

* Design and deploy access requests, approvals, certifications, Separation of

Duties (SoD) controls, role mining and role design, and connectors at scale

* Build and lead runbooks, a Level 1-Level 3 support model, SLAs, and

audit-ready evidence for access governance and privileged access

* Implement IAM components in the cloud (e.g., AWS) with secure networking,

logging, and deployment patterns

* Apply AI/ML-assisted analytics in Saviynt or similar IGA products (e.g.,

access anomaly detection, certification prioritization, identity risk

scoring, and role/entitlement recommendations)

Required

Qualifications

• * S. Citizenship
• * Ability to obtain and maintain a Tier 4 / High Risk background investigation
• (High Risk Public Trust), as required for all task areas under this contract
• * Bachelor’s degree in Engineering, Computer Science, Systems, Business,
• Information Systems, Information Resource Management, or a related scientific
• discipline
• * Product certification(s), such as Saviynt, SailPoint, or equivalent
• * Demonstrated healthcare IAM delivery across all three sectors: at least one
• State/Local public health or Medicaid/eligibility environment, one commercial
• payer/provider environment, and one Federal health (or Federal
• health-adjacent) environment, with references tied to measurable outcomes
• (e.g., application onboarding volume, MFA adoption, audit findings reduced)
• * Proven multi-identity population design supporting employees, contractors,
• temporary staff, vendors, and affiliates/partners with distinct lifecycle
• rules, entitlements, and separation of duties
• * Experience with agency/department partitioning, delegated administration, and
• policy differences across State/Local entities and Federal components
• * Demonstrated automation for high-volume onboarding/offboarding of large
• contractor/temporary workforces (bulk onboarding, time-bound access, sponsor
• approvals)
• * Expertise implementing and supporting cloud-based Identity Management and
• Access Governance products
• * Expertise in legacy-to-modern integration, including hybrid identity patterns
• (on-prem and cloud), directory consolidation, application modernization
• waves, and identity data quality remediation
• * Has led at least two IAM modernization or legacy migrations (e.g., AD/LDAP
• rationalization, custom IAM replacement, SSO federation rollout, provisioning
• modernization) with a clear cutover strategy (parallel run, staged migration,
• rollback)
• * Operational expertise to build or lead runbooks, a Level 1-Level 3 support
• model, SLAs, and audit-ready evidence for access governance and privileged
• access
• * Expertise with designing and deploying access request, approvals,
• certifications, SoD controls, role mining/role design, and connectors at
• scale
• * Experience with applying AI/ML-assisted analytics in Saviynt and/or similar
• IGA products contexts (e.g., access anomaly detection, certification
• prioritization, identity risk scoring, role/entitlement recommendations)
• * Expertise in cloud and directory and implemented IAM components in cloud
• (such as AWS) with secure networking, logging, and deployment patterns
• * Expertise with the security architecture of the solution, including IAM,
• Cloud Security, API Security, and Data Security
• Desired

Qualifications

• * Experience supporting the Department of Veterans Affairs (VA) or another
• large federal health agency
• * Hands-on experience with VA’s incumbent ICAM stack (e.g. Saviynt, CyberArk,
• Microsoft Entra ID, Okta, IBM Master Data Management)
• * Master’s degree in a related field
• Life at Capgemini
• Capgemini supports all aspects of your well-being throughout the changing stages
• of your life and career. For eligible employees, we offer:
• * Flexible work
• * Healthcare including dental, vision, mental health, and well-being programs
• * Financial well-being programs such as 401(k) and Employee Share Ownership
• Plan
• * Paid time off and paid holidays
• * Paid parental leave
• * Family building benefits like adoption assistance, surrogacy, and
• cryopreservation
• * Social well-being benefits like subsidized back-up child/elder care and
• tutoring
• * Mentoring, coaching and learning programs
• * Employee Resource Groups
• * Disaster Relief

About Capgemini

Capgemini is a global business and technology transformation partner, helping

organizations to accelerate their dual transition to a digital and sustainable

world, while creating tangible impact for enterprises and society. It is a

responsible and diverse group of 340,000 team members in more than 50 countries.

With its strong over 55-year heritage, Capgemini is trusted by its clients to

unlock the value of technology to address the entire breadth of their business

needs. It delivers end-to-end services and solutions leveraging strengths from

strategy and design to engineering, all fueled by its market leading

capabilities in AI, generative AI, cloud and data, combined with its deep

industry expertise and partner ecosystem. The Group reported 2024 global

revenues of €22.1 billion.

Get The Future You Want | www.capgemini.com [http://www.capgemini.com/#_blank]

Disclaimer

All qualified applicants will be considered for employment based on their

skills, and merit.

Please be aware that Capgemini may capture your image (video or screenshot)

during the interview process and that image may be used for verification,

including during the hiring and onboarding process.

Applicants for employment in the US must have valid work authorization that does

not now and/or will not in the future require sponsorship of a visa for

employment authorization in the US by Capgemini.

Capgemini discloses salary range information in compliance with state and local

pay transparency obligations. The disclosed range represents the lowest to

highest salary we, in good faith, believe we would pay for this role at the time

of this posting, although we may ultimately pay more or less than the disclosed

range, and the range may be modified in the future. The disclosed range takes

into account the wide range of factors that are considered in making

compensation decisions including, but not limited to, geographic location,

relevant education, qualifications, certifications, experience, skills,

seniority, performance, sales or revenue-based metrics, and business or

organizational needs. At Capgemini, it is not typical for an individual to be

hired at or near the top of the range for their role. The base salary range for

the tagged location is $120K - $155K

This role may be eligible for other compensation including variable

compensation, bonus, or commission. Full time regular employees are eligible for

paid time off, medical/dental/vision insurance, 401(k), and any other benefits

to eligible employees.

Note: No amount of pay is considered to be wages or compensation until such

amount is earned, vested, and determinable. The amount and availability of any

bonus, commission, or any other form of compensation that are allocable to a

particular employee remains in the Company's sole discretion unless and until

paid and may be modified at the Company’s sole discretion, consistent with the

law.