Software Development Engineer; SailPoint Administrator

Software Development Engineer

We're building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you'll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

The Software Development Engineer (SDE) will be responsible for designing, developing, testing, and maintaining the enterprise Identity Governance and Administration (IGA) platform that supports CVS Health's Healthcare Delivery (HCD) division, spanning Signify Health, Oak Street Health, and RubiconMD. This role partners closely with Compliance, Identity Architecture, Network Operations, and Security teams to deliver reliable, secure, and auditable identity and access management solutions.

The engineer will contribute to core IAM platform services built on SailPoint Identity Security Cloud, including provisioning workflows, lifecycle automation, role-based access control (RBAC), access certification, and compliance reporting, while ensuring adherence to enterprise standards and best practices.

Required Qualifications:

• 3+ years of SailPoint Engineering experience building enterprise-grade applications and services.
• 2+ years of hands-on SailPoint experience (Identity Now / Identity Security Cloud).
• Candidates must be able to independently configure and troubleshoot SailPoint connectors, rules, transforms, and workflows from day one.
• Hands-on experience with identity provisioning architectures spanning HRIS, directory services, and identity providers (e.g., Workday, Active Directory, Okta).
• Understanding of software design patterns, scalable system design, and data modeling as applied to identity governance.
• Experience building and maintaining Joiner/Mover/Leaver/Rehire/Inactive lifecycle workflows and Role-Based Access Control (RBAC) models.
• Strong analytical, problem-solving, and troubleshooting skills, including the ability to diagnose issues across multiple connected identity systems.
• Ability to work effectively in Agile/Scrum development environments.
• Excellent written and verbal communication skills with the ability to collaborate across technical, compliance, and business teams.

Preferred Qualifications:

• Experience supporting SOX, SOC2, or HiTrust compliance programs, including access certification campaigns, Separation of Duties (SoD) reporting, and Periodic Access Reviews (PAR), and NIST framework.
• Experience in a multi-tenant or multi-company (M&A-integrated) identity environment, including cross-corporate access patterns.
• Familiarity with Okta Workforce administration and AD-to-IDP provisioning flows (this role is SailPoint-focused; Okta exposure is a plus, not a requirement).
• Experience developing and consuming RESTful APIs and working with JSON-based integrations.
• Familiarity with Neo4j or graph-based identity stores and Azure-hosted identity infrastructure.
• Exposure to healthcare or other highly regulated industries with secure data handling practices.
• SailPoint Identity Now/ISC certifications.
• Experience leading technical initiatives or mentoring engineers on identity governance best practices.
• Knowledge of CI/CD pipelines, source control systems (Git/Git Hub), and automated deployment practices as applied to IAM platform configuration and code.

Education:

• Bachelor's degree in Computer Science, Software Engineering, Information Systems, or a related technical field; or 4+ years of progressive, hands-on experience in Identity and Access Management in lieu of a degree.
• An equivalent combination of education, professional training, and relevant work experience may be considered.

Key Technologies:
SailPoint Identity Security Cloud (ISC/Identity Now), REST APIs, JSON, Active Directory, Okta Workforce, Workday, Neo4j, Git/Git Hub, CI/CD, Service Now (self-service access requests), Confluence.

Anticipated Weekly

Hours:

40

Time Type:
Full time

Pay Range:
The typical pay range for this role is: $64,890.00 - $. This pay range represents the base hourly…