Capgemini Government Solutions

Solutions Engineer

• Act as a liaison between client needs and architectural/engineering teams.
• Work closely with solution architects to translate business requirements.
• Maintain and update technical documentation.
• Research technologies and evaluate their potential use.

Engineering and Solution Architecture

Backend Engineer

• Design and deploy Windows Server instances on physical hardware and VMware virtualization platforms.
• Administer enterprise-level DNS, DHCP, and IPAM (IP Address Management) to ensure reliable network connectivity.
• Implement security baselines (STIGs/CIS), manage WSUS for centralized patching, and ensure SOC 2 or internal audit compliance.
• Manage on-premises backup solutions and execute regular restoration drills to ensure 'Zero Data Loss.'
• Coordinate with vendors for physical server repairs, firmware updates, and data center capacity planning (power/cooling).
• Monitor system health (CPU, Memory, Disk I/O) and optimize server configurations for specific roles like File/Print, SQL, or IIS.

Windows Server Engineer

Engineer

• Lead the architecture, implementation, and management of data governance and information protection strategy
• Bridge the gap between raw data and secure, governed insights
• Ensure digital estate is mapped, classified, and protected according to global regulatory standards
• Architect and deploy the Microsoft Purview governance portal to scan, ingest, and catalog metadata
• Design and maintain a comprehensive Sensitivity Labeling taxonomy and Data Loss Prevention (DLP) policies
• Establish end-to-end data lineage to provide visibility into data movement and transformation
• Configure and monitor Insider Risk Management and Communication Compliance policies
• Develop PowerShell scripts and utilize Purview APIs to automate tasks and integrate with Microsoft Sentinel
• Act as the technical lead for Data Privacy, Legal, and IT teams to translate regulatory requirements into technical controls

Purview Engineer

• Collaborate with a high-performing team to support mission-critical government clients
• Design, implement, and sustain the BeyondTrust ecosystem
• Ensure secure management of privileged identities
• Act as the primary administrator for PAM vaulting solutions
• Work closely with Infrastructure, DevOps, and Security Operations teams
• Monitor syslog/HEC data streams to Splunk for security auditing

PIM/PAM Engineer

• Architect and maintain multi-tier Certificate Authority hierarchies (Root, Subordinate, and Issuing CAs) using Microsoft ADCS, Entrust, or DigiCert.
• "Enable" applications (Web, Mobile, IoT) to use certificates for S/MIME email encryption, TLS/SSL, and 802.1X network authentication.
• Implement and manage Certificate Lifecycle Management (CLM) tools like Venafi, Keyfactor, or AppViewX to automate renewals and prevent outages
• Manage the physical and logical lifecycle of Hardware Security Modules (HSMs) such as Thales/nCipher or Utimaco.
• Draft and enforce the Certificate Policy (CP) and Certification Practice Statement (CPS) to ensure legal and regulatory compliance (e.g., FIPS 140-2/3).
• Lead the transition to Post-Quantum Cryptography (PQC) algorithms to protect against "harvest now, decrypt later" threats.
• Act as the SME for certificate-related outages, compromised keys, or emergency revocation (CRL/OCSP) procedures.

PKI/PKE Engineer

Consultant

• Maintain and support existing client systems and applications
• Assist in the design and implementation of web applications, prototypes, and user interfaces
• Analyze client business requirements and assist in translating their needs into technical requirements
• Use strong communications skills to interact with team members and clients daily
• Engage in critical problem solving
• Create timely and accurate documentation for all work products
• Participate in project planning/estimation with the project manager
• Implement tasks in accordance with the schedule
• Continuously improve skills, adopt emerging technologies, and apply best practices

Technical Consultant

• Review and optimize SQL code to ensure efficiency, scalability, and alignment with client requirements
• Maintain and manage data domains, ensuring structured, consistent, and efficient data organization
• Oversee daily database and ETL operations, monitoring workflows to troubleshoot and optimize performance
• Monitor cybersecurity principles and implement safeguards to protect sensitive data
• Aggregate and optimize performance across multiple data sources, building unified views to enhance insights and decision-making
• Develop, refine, and maintain VistA tables to ensure ongoing improvements and usability
• Identify and mitigate risks related to data operations, availability, and performance
• Support existing and new ETL processes, ensuring smooth and reliable migration of data across systems
• Facilitate data distribution across enterprise platforms, optimizing accessibility for stakeholders
• Create and maintain comprehensive documentation, including code repositories, process workflows, and user manuals.

Senior ETL/SQL Engineer

ServiceNow

• Lead review and assignment of tasks for development sprints, testing or another period
• Facilitate daily standup and weekly status meetings, helping project team schedule and resource tasks
• Drive progress towards project objectives by ensuring each team member person is working on the right tasks, managing schedules and capacities, and mitigating obstacles
• Manage user stories, creating and maintaining project documentation, such as user stories, sprint backlogs, and release plans
• Experience with working with Product Owners/Managers and maintaining Product Backlog
• Define, measure, and improve using KPIs
• Create a plan to deliver a working solution
• Backlog Refinement, Packaging, Deployment, and Release

Senior ServiceNow Business Analyst

Risk

• Design and maintain the RadiantOne Virtual Directory Service (VDS) to aggregate, correlate, and orchestrate identity data from disparate sources (AD, LDAP, SQL, HRIS)
• Perform complex identity correlation and join logic to ensure "Golden Records" are accurate, high-performing, and scalable
• Lead service management initiatives, ensuring that the identity platform meets high-availability requirements and supports the organization's portfolio management objectives

IAM Engineer, User Data Governance Manager

• Review and optimize SQL code to ensure efficiency, scalability, and alignment with client requirements.
• Maintain and manage data domains, ensuring structured, consistent, and efficient data organization.
• Oversee daily database and ETL operations, monitoring workflows to troubleshoot and optimize performance.
• Monitor cybersecurity principles and implement safeguards to protect sensitive data.
• Aggregate and optimize performance across multiple data sources, building unified views to enhance insights and decision-making.
• Develop, refine, and maintain VistA tables to ensure ongoing improvements and usability.
• Identify and mitigate risks related to data operations, availability, and performance.
• Support existing and new ETL processes, ensuring smooth and reliable migration of data across systems.
• Facilitate data distribution across enterprise platforms, optimizing accessibility for stakeholders.
• Create and maintain comprehensive documentation, including code repositories, process workflows, and user manuals.

• Design and implement identity-based access control policies that adhere to Zero Trust principles (Never Trust, Always Verify)
• Lead the deployment, configuration, and optimization of PingFederate and Ping Access to provide seamless SSO and attribute-based access control (ABAC)
• Manage the full lifecycle of Identity, Credential, and Access Management (ICAM), including automated provisioning and complex directory integrations
• Collaborate with the SOC and Network teams to integrate identity signals into our broader security monitoring and incident response workflows
• Act as the subject matter expert for integrating PingFederate as the core Identity Provider (IdP) with third-party Zero Trust ecosystem components, including Privileged Access Manager (PAM), Master User Record (MUR) and Identity Governance and Administration (IGA)
• Create and maintain authentication policies, including Multi-Factor Authentication (MFA) and Risk-Based Authentication (RBA)
• Provide guidance and hands-on training for onboarding new applications into PingFederate using self-service templates, OIDC, and SAML to ensure consistent security standards across the enterprise

Identity Platform Engineer

• Lead review and assignment of tasks for development sprints, testing or another period
• Facilitates daily standup and weekly status meetings, helping project team schedule and resource tasks
• Drives progress towards project objectives by ensuring each team member is working on the right tasks, managing schedules and capacities, and mitigating obstacles
• Manage user stories, creating and maintaining project documentation, such as user stories, sprint backlogs, and release plans
• Experience working with Product Owners/Managers and maintaining Product Backlog
• Define, measure, and improve using KPIs
• Creating a plan to deliver a working solution
• Backlog Refinement, Packaging, Deployment, and Release

Product Designer

• Create clear, user‑focused web and digital experiences for government clients.
• Work closely with both external clients and internal, cross-functional teams on projects that range from a few weeks to a few months in length.
• Provide strategic consultation during client meetings to understand needs, clarify requirements, and guide design direction.
• Integrate client feedback to refine concepts and deliver high‑quality designs that meet user needs and support project goals.
• Plan and facilitate workshops to gather insights, align stakeholders, and drive informed design decisions.

UI/UX Designer

DevOps Engineer

• Design and manage end-to-end CI/CD pipelines for local and cloud environments
• Use DevOps tools for local hardware and cloud environment management
• Manage networking and data synchronization between on-prem storage and cloud-native services
• Embed security scanning and compliance checks into development lifecycle
• Identify opportunities to automate manual workflows

Financial Planning and Analysis

• Serve as the workstream lead and primary point of contact for the government client
• Provide strategic guidance and architectural input to inform future government contracting strategy
• Partner with internal stakeholders and external partners to define business requirements
• Collect, analyze, and interpret complex data sets to provide insights on project progress
• Assess current workflows, systems, and processes to recommend improvements
• Collaborate across finance, operations, program management, and external clients to meet project milestones
• Oversee contract documentation, ensuring compliance with military standards and government regulations
• Identify potential risks associated with defense or government contracts and propose mitigation strategies

Engineering and Solution Architecture

Windows Server Engineer

Purview Engineer

PIM/PAM Engineer

PKI/PKE Engineer

Technical Consultant

Senior ETL/SQL Engineer

Senior ServiceNow Business Analyst

IAM Engineer, User Data Governance Manager

Senior ETL/SQL Engineer

Identity Platform Engineer

Senior ServiceNow Business Analyst

UI/UX Designer

DevOps Engineer

Government Financial and Contract Transformation Lead