Senior Identity Engineer

Position Summary:

Ignite IT is seeking a Senior Identity Engineer with strong software-development skills to build, enhance, and support complex enterprise applications, integrations, and business workflows for a Government Agency contract. The primary emphasis is hands-on coding, reusable automation, and reliable software delivery, combined with meaningful knowledge of identity and access management.

The engineer will translate business requirements into production code for identity lifecycle processes, approval workflows, provisioning, synchronization, reconciliation, and related enterprise services. The role requires Linux, Bash, Terraform, Python, PowerShell, JavaScript, and practical DevOps and continuous integration/continuous delivery (CI/CD) experience.

Knowledge of an enterprise IAM platform such as OpenText/NetIQ, Okta, SailPoint, or a comparable platform is required. Prior OpenText Identity Manager and eDirectory experience is preferred, not required; a strong developer with relevant IAM knowledge must be able to learn and support these products. Platform administration or low-code configuration alone does not replace the required coding capability.

Scope and Technology Ownership:

• Enterprise workflow applications, backend services, APIs, reusable integration modules, scripts, and infrastructure/configuration as code.
• Identity lifecycle and access workflows connecting authoritative HR/personnel data, directories, databases, enterprise applications, and cloud services.
• The existing environment includes OpenText/NetIQ Identity Manager and eDirectory on RHEL, Active Directory, LDAP/LDAPS, Okta, database integrations, and certificate-management tooling. It uses GitHub Enterprise/SVN, ServiceNow, and formal change review.

Initial Assignment Focus:

• Review the inherited code, interfaces, platform configuration, and turnover materials; establish development and test access; and deliver prioritized improvements to identity workflows, PKI certificate-renewal automation, Okta configuration as code, and deployment practices. Coordinate support for the directory-platform upgrade and production incidents with the identity team as product-specific proficiency is established.

Key Responsibilities:

Enterprise Application and Business-Workflow Development

• Design, code, test, debug, and maintain enterprise applications and services that implement complex business rules, approval paths, access requests, and identity-related workflows.
• Develop maintainable Python and JavaScript application/integration code and reusable Bash and PowerShell automation. Review and extend existing code rather than relying only on vendor interfaces or one-off scripts.
• Implement data validation, transformations, error handling, retries, logging, and audit records. Build automated tests and resolve defects across applications, APIs, databases, and connected services.

Identity Integration and Lifecycle Engineering:

• Develop and support joiner, mover, leaver, rehire, account-reactivation, provisioning, deprovisioning, and reconciliation workflows. Maintain entitlement logic, mappings, synchronization rules, and approval processes.
• Integrate IAM platforms with HR sources, Active Directory, LDAP-based directories, databases, applications, and web services using REST, SOAP, JDBC, LDAP, JSON, XML, and SQL as applicable.
• Learn and enhance the installed OpenText/NetIQ environment, including drivers, connectors, policies, and identity transformations. Troubleshoot rejected transactions, malformed attributes, duplicate or orphaned accounts, and authentication or authorization failures.

Linux, Terraform, and Operational Automation:

• Develop, deploy, and troubleshoot services and automation on Linux, including RHEL. Work with shell tools, permissions, services, logs, scheduled tasks, configuration files, and secure remote access.
• Create and maintain reusable Terraform modules and configuration for identity and supporting infrastructure. Manage variables, outputs, environment-specific settings, dependencies, and state through controlled review and deployment.
• Extend certificate-request, issuance, renewal, and deployment workflows using the existing PKI tooling, databases, Bash/Python, and OpenSSL. Protect credentials and secrets and verify end-to-end results.

DevOps, CI/CD, and Secure Software Delivery:

• Build and maintain CI/CD pipelines for code, integrations, scripts, and Terraform changes using Government Agency-approved tools. Automate build, validation, testing, deployment, and release checks.
• Use Git-based source control, branching, pull requests, peer review, and versioned releases. Promote tested changes through development, test, and production with approved gates, documented rollback procedures, and post-deployment verification.

Production Support, Change Control, and Documentation:

• Diagnose complex application, identity, directory, certificate, and integration incidents using logs, traces, code, and data. Implement corrective changes and support approved maintenance or on-call activities.
• Prepare change requests, implementation and rollback plans, and validation evidence; participate in Change Advisory Board reviews. Coordinate work with identity, application, infrastructure, cloud, security, and database teams.
• Maintain technical designs, interface specifications, verified architecture/data-flow diagrams, SOPs, runbooks, code documentation, and knowledge-transfer materials. Provide status updates and support audit and security reviews.

Required Qualifications:

• Senior-level experience, typically seven or more years, in software development, enterprise application integration, IAM engineering, automation, or a closely related discipline, with substantial personal responsibility for production code.
• Strong core programming skills demonstrated through complex enterprise applications or business workflows. Ability to translate requirements into modular code, debug existing applications, work with data structures and APIs, and implement reliable error handling, testing, and logging.
• Hands-on development proficiency in Python and JavaScript, and strong scripting capability in Bash and PowerShell. Candidates must be able to write, troubleshoot, test, and maintain code in these technologies, not merely list familiarity with them.
• Practical Linux experience supporting application and integration development, deployment, troubleshooting, services, permissions, logs, and command-line automation.
• Hands-on Terraform experience developing and maintaining configuration as code, including reusable modules, variables and outputs, state management, and reviewed deployment plans.
• Practical DevOps and CI/CD experience building or maintaining pipelines, automated tests, deployment controls, and Git-based code-review and release workflows. Experience simply consuming a pipeline is not sufficient.
• Working knowledge of at least one enterprise IAM platform, such as OpenText/NetIQ Identity Manager, Okta, SailPoint, or a comparable platform, together with practical experience integrating identity services into applications or workflows.
• Understanding of identity lifecycle, provisioning/deprovisioning, synchronization, reconciliation, access approvals, role-based access, authentication, authorization, and directory integration. Ability to learn OpenText/eDirectory and apply these concepts in the installed environment.
• Experience with API and database integrations, structured data such as JSON/XML, basic SQL, LDAP-based directories, and secure handling of credentials, certificates, and sensitive information.
• Strong troubleshooting, technical documentation, and collaboration skills. Ability to work within formal change control and provide production support for approved changes and incidents.
• U.S. citizenship and the ability to obtain and maintain the required Government Agency background investigation, suitability/access authorization, and related security and confidentiality requirements.

Preferred Qualifications:

• Hands-on OpenText/NetIQ Identity Manager or eDirectory experience, including Designer, DirXML policies, drivers, schema, replication, and platform upgrades.
• Okta lifecycle integration and Terraform Okta-provider experience; SailPoint workflow, connector, or rule development; or comparable identity automation experience.
• RHEL, AWS/GovCloud, Podman or Docker, PKI/TLS and OpenSSL, certificate-renewal automation, or GitHub Enterprise/SVN experience.
• Government-contract or regulated-enterprise experience, including ServiceNow, formal change reviews, security controls, and audit documentation.

Key Work Products and Deliverables

• Production-ready application and integration code; tested identity workflows, connectors, mappings, and reusable automation; Terraform modules and CI/CD definitions; automated tests; approved release and rollback packages; certificate-automation enhancements; and maintained technical documentation and operational runbooks.

Desired Certifications

• Relevant IAM, cloud, Linux, Terraform, or DevOps certifications are helpful but do not substitute for demonstrated coding, workflow-development, and software-delivery experience.

ATD Technology, LLC is a certified minority woman owned business that creates opportunities to match qualified individuals with client programs while meeting all parties' financial and technical goals. ATD is a full service provider with offerings in Contract, Permanent and Temp-to-Perm staffing solutions. We serve Fortune 1000, mid cap and small cap companies in the Commercial, Public and Government sectors.