Sr. Sailpoint Engineer

Job Description Fabletics is looking for a Sr. SailPoint Engineer to join our Identity Governance team's SailPoint Engineering group, working alongside other SailPoint Engineers to administer and evolve the SailPoint Identity Security Cloud / Identity Now platform — including application onboarding, lifecycle automation, and ongoing improvements to MyAccess. This role will work independently and collaboratively across application integrations, RBAC design, and identity governance initiatives, partnering with IT Operations, Service Desk, HRIS/Workday, Security, and business stakeholders to keep identity processes reliable, auditable, and scalable.

The Sr. SailPoint Engineer is a key contributor to Fabletics' Identity & Access Management program, working as part of a team of SailPoint Engineers to configure, troubleshoot, and improve SailPoint. You'll take on application integration projects (including Workday), contribute to the design and rollout of an org-wide RBAC framework, and help diagnose and repair broken identity workflows — sometimes independently, sometimes in partnership with teammates on larger initiatives.

This is a strong fit for someone who already has real SailPoint depth, works well both independently and as part of a collaborative engineering team, and wants meaningful input into how identity is modeled and secured company-wide.

• 3-5 years of hands-on experience administering a SailPoint IGA platform (Identity Security Cloud/Identity Now required; Identity IQ experience a plus), including access certifications, provisioning policies, and identity lifecycle workflows.
• Experience integrating SailPoint with Workday as an authoritative identity source — including HR-driven identity events (hire, transfer, termination, rehire), attribute mapping, and troubleshooting sync/integration failures between the two platforms.
• Experience building and integrating applications/sources into an IGA platform — connector configuration, entitlement mapping, aggregation, and correlation.
• Demonstrated ability to diagnose and fix broken or unreliable workflows — approval routing failures, stuck workflows, provisioning/deprovisioning failures, and aggregation issues — including root‑cause analysis, not just one‑off patches.
• Working knowledge of Role‑Based Access Control (RBAC) theory — role mining, role hierarchies, least‑privilege design, separation‑of‑duties — with the ability to contribute to designing or maturing an RBAC model in a live enterprise environment.
• Solid understanding of IAM concepts: users, groups, roles, entitlements, access requests, approvals, provisioning, deprovisioning, and certifications.
• Experience integrating SailPoint with Active Directory and Azure / Microsoft Entra .
• Experience configuring SCIM and REST API integrations, and building workflow automation.
• Ability to work independently on assigned initiatives as well as collaboratively within a team of SailPoint Engineers on larger projects.
• Experience partnering with application owners, auditors, and compliance stakeholders on access reviews.
• Strong communication skills with both technical and non-technical stakeholders.
• Foundational-to-intermediate AI literacy, with experience using generative AI tools to drive productivity in identity operations.

• Experience with Microsoft Teams workflow-based approvals.
• Familiarity with ITSM tools such as Fresh service, Jira, or Microsoft Planner.
• Experience supporting SOX audits, access reviews, or compliance programs.
• Prior experience mentoring junior engineers or service desk staff on IAM concepts.

• Contribute to the design and organization‑wide rollout of a Role-Based Access…