Sr. Lead, IGA Engineer - SailPoint ISC

Job

16300

Newell Brands is a leading consumer products company with a portfolio of iconic brands like Graco®, Coleman®, Oster®, Rubbermaid®, Sharpie® and Yankee Candle® - and 24,000 talented teammates around the world. Our culture is built on values in action:
Integrity, Teamwork, Passion for Winning, Ownership, and Leadership. We work together to win, grow, and make a real impact—supported by a high-performing, inclusive, and collaborative environment where you can be your best, every day.

Position Title: IGA Engineer – SailPoint ISC

Location: Hybrid

Reports To: Darren Whitfield – Sr. Manager, IAM Security

Department: Information Security / Identity & Access Management

Employment Type: Full-Time

We are seeking a seasoned and highly skilled IGA Engineer with deep, hands‑on expertise in SailPoint Identity Security Cloud (ISC) to join our Identity & Access Management team. This is a subject matter expert (SME) role, not a generalist position — the successful candidate will have architected, built, and operated SailPoint ISC environments at scale and will be capable of leading complex implementation work streams independently.

The engineer will serve as the technical authority for our IGA platform, driving platform maturity, connector development, transform engineering, and integration across enterprise systems including SAP. This role demands proficiency in both the configuration and development dimensions of SailPoint ISC, including hands‑on API/Postman-driven automation, Bean Shell/Rule scripting, and transform authoring.

• Serve as the SailPoint ISC platform SME, owning architecture decisions, platform roadmap contributions, and technical standards.
• Design, build, and optimize ISC configurations including source onboarding, provisioning policies, role modelling, and access profiles.
• Architect and implement entitlement management, separation of duties (SoD) controls, and least‑privilege access (LPA) frameworks.
• Lead the design and delivery of joiner/mover/leaver (JML) lifecycle workflows and birthright access provisioning.
• Evaluate and implement SailPoint NERM (Non‑Employee Risk Management) and ARM (Access Risk Management) capabilities.

• Develop, configure, and maintain connectors for SAP (HCM, ECC, GRC, S/4
  
  HANA, Ariba, Concur), Salesforce, IBMi, and other enterprise systems.
• Build and maintain SailPoint ISC SaaS Connectivity connectors using the Connector SDK and REST‑based custom connectors.
• Design and implement Virtual Appliance (VA) configurations and cluster management for on‑premises source connectivity.
• Integrate ISC with HR systems of record (e.g., Workday, SAP HCM) to drive authoritative source feeds.

• Author, test, and maintain SailPoint ISC transforms (Velocity, Seaspray, and rule‑based) using Postman and the SailPoint ISC REST API.
• Use Postman collections to build, validate, and automate transform testing workflows and connector configuration management.
• Write and maintain Bean Shell rules for complex provisioning logic, correlation, and identity attribute manipulation.

• Design, configure, and manage access certification campaigns including user access reviews (UAR), entitlement reviews, and role reviews.
• Maintain RBAC and ABAC frameworks, including role mining, role composition, and automated access assignment policies.
• Support audit and compliance activities related to SOX, GDPR, and internal IAM policy requirements.
• Partner with GRC and audit teams to ensure access controls meet regulatory and internal policy standards.
• Produce and maintain platform documentation, runbooks, and governance artefacts for audit readiness.

• Act as the IGA technical escalation point for the broader IAM team, resolving complex platform and integration issues.
• Collaborate with application owners, HR, Legal, and security teams to gather requirements and deliver IGA solutions.
• Provide technical mentorship to less experienced IGA engineers and analysts on SailPoint ISC best…