Sr Identity Access Management Engineer

When you’re the best, we’re the best. We instill an environment where employees feel engaged, satisfied and able to contribute their unique skills and talents while living and working as their authentic selves. We provide extensive opportunities for personal and professional development, building both employee competence and organizational capability to fuel exceptional performance through an inclusive environment both now and in the future.

In this role, you will lead the design, implementation, and support of enterprise Identity and Access Management (IAM) solutions, with a primary focus on SailPoint Identity Security Cloud (ISC) and Identity IQ (IIQ). You will deliver secure, scalable identity governance capabilities across cloud and on‑premises environments, including identity lifecycle management, access governance, provisioning, role management, and system integrations. You will collaborate with Security, Risk, Audit, Technology, and business teams while providing technical leadership across complex IAM initiatives.

• Design, implement, configure, and maintain SailPoint Identity Security Cloud (ISC) and Identity IQ (IIQ) solutions.
• Develop and support identity profiles, lifecycle states, transforms, provisioning policies, workflows, rules, and access request processes.
• Design and maintain identity lifecycle management processes, including joiner, mover, leaver (JML), provisioning, de‑provisioning, and access changes.
• Configure and support application onboarding, aggregation, reconciliation, identity correlation, and disconnected application integrations.
• Develop integrations using SailPoint APIs, REST APIs, SCIM, Java, Bean Shell, Power Shell, and related technologies.
• Design and implement role‑based access control (RBAC), attribute‑based access control (ABAC), role mining, and role engineering solutions.
• Lead access certification, segregation of duties (SoD), access governance, and risk‑based identity control initiatives.
• Support SailPoint Identity IQ modernization and migration to SailPoint Identity Security Cloud, as applicable.
• Partner with Security, Risk, Audit, Technology, and business teams to translate security, compliance, and technical requirements into scalable IAM solutions.
• Implement governance controls and support audit and compliance requirements, including SOX, PCI‑DSS, HIPAA, GDPR, ISO
  27001, and NIST.
• Lead technical delivery across IAM initiatives, including requirements, solution design, testing, deployment, risks, dependencies, and stakeholder communication.
• Improve IAM processes, automation, security, and operational effectiveness while mentoring engineers and providing technical guidance across the team.

• Relevant degree in Computer Science, Information Systems, Cybersecurity, Engineering, Business, or related technical field preferred.
• 5 or more years of progressive Identity and Access Management (IAM) experience required.
• 5 or more years of hands‑on SailPoint Identity Security Cloud (ISC) and/or Identity IQ (IIQ) implementation experience required.
• Experience implementing identity lifecycle management, access certifications, access requests, provisioning and de‑provisioning, role management, segregation of duties (SoD), and RBAC or ABAC models.
• Experience configuring SailPoint connectors, identity profiles, transforms, correlation rules, workflows, provisioning policies, certification campaigns, and access governance capabilities.
• Experience integrating IAM solutions with Active Directory, Microsoft Entra , LDAP, HR systems, cloud platforms, SaaS applications, and relational databases.
• Experience developing and supporting IAM integrations using REST APIs, SCIM, Java/Bean Shell, Power Shell, Python, SQL, or similar technologies.
• Strong knowledge of IAM standards and technologies, including SAML
  2.0, OAuth
  2.0, OpenID Connect (OIDC), federation, multi‑factor authentication (MFA), and Zero Trust principles.
• Experience delivering enterprise‑scale IAM solutions and working across complex cloud and on‑premises environments.
• Experience with privileged access management technologies such as Cyber Ark, Beyond Trust, Delinea, or similar platforms preferred.
• Experienc…