Sailpoint Migration Lead

Terms:

Contract until Dec 2026 (Potential to get extended)

We are seeking a Senior SailPoint Developer to lead a strategic migration from SailPoint Identity

IQ (IIQ) to SailPoint Identity Security Cloud (ISC).

This role is focused on modernization, simplification, and technical debt reduction — not lift-and-shift replication. The current IIQ environment is heavily customized with Java plugins, Bean Shell rules, and bespoke workflows. Your mission will be to rationalize this legacy logic and re-engineer it into a scalable, cloud-native ISC implementation leveraging out-of-the-box capabilities.

You will serve as the technical authority on migration strategy, architecture, and execution.

• Onsite: Monday–Thursday
• Remote: Friday
• If a holiday falls on a scheduled onsite day, Friday becomes onsite that week.

• Lead full-cycle migration from IIQ to ISC, including assessment, rationalization, and rebuild.
• Develop a migration roadmap focused on reducing customization and maximizing native ISC functionality.
• Serve as technical SME and mentor for engineering teams.
• Audit and reverse-engineer legacy Java plugins and Bean Shell workflows.
• Extract and document core business logic from highly customized implementations.
• Identify opportunities to eliminate redundant or high-maintenance custom code.
• Replace legacy workflows with:
  • ISC Transforms
  • ISC Workflows
  • Lifecycle States
  • Event Triggers
• Re-model IIQ roles, entitlements, and access structures into ISC-aligned models.
• Leverage SailPoint REST APIs and ISC Connectivity framework for integrations and data migration.
• Implement external automation where native ISC extensibility is insufficient.
• Build or integrate microservices and containerized components where appropriate.
• Support integrations using cloud-native and API-first principles.
• Apply secure coding and scalable architectural patterns.

• Proven leadership of at least one full migration from IIQ to ISC.
• Deep expertise in:
  • Java-based IIQ plugins
  • Bean Shell rules & workflows
  • Complex rule-based provisioning logic
• Advanced ISC development:
  • Complex Transforms
  • Lifecycle States
  • Workflows
  • Event Triggers
• Strong working knowledge of:
  • SailPoint REST APIs
  • ISC Connectivity framework
• Experience in microservices and containerized environments (e.g., Kubernetes-based deployments).
• Strong SQL skills for migration validation and reconciliation.

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field
• OR 8+ years equivalent IAM experience
• 5+ years enterprise IAM engineering experience
• 4+ years SailPoint IIQ development
• 2+ years Identity Security Cloud (ISC) experience
• At least one completed end-to-end IIQ → ISC migration

• Experience deploying ML solutions in Azure or Kubernetes environments.
• Familiarity with SailPoint Roles Insights or AI-driven access recommendations.
• Knowledge of responsible AI and secure coding principles.
• Experience leveraging analytics to drive role mining during transformation.

The ideal candidate:

• Thinks in architecture and outcomes
  , not just code.
• Challenges “we’ve always done it this way.”
• Focuses on standardization, scalability, and maintainability
  .
• Understands identity governance as a business control function, not just a technical implementation.