SailPoint Engineer

Note:

Preference is for the candidates who could be onsite in Needham, MA but might consider some remote candidates if they are exceptional.

Title:
SailPoint Engineer

Location:
Needham, MA

Duration: 12+ months ( potential contract to hire)

The Lead Systems Analyst - SailPoint ISC is a senior technical and delivery-focused role responsible for the design, implementation, and ongoing maturity of SailPoint ISC capabilities. This role will act as a technical leader within the IAG function, driving best practice across the platform, lifecycle automation, integrations, and governance.

This is a global, matrixed role working closely with Information Security, IAM engineers, architects, application owners, and business stakeholders across the US and globally.

Key Responsibilities

SailPoint ISC Platform

• Act as a subject matter expert for SailPoint Identity Security Cloud, owning configuration, design decisions, and technical standards. ead the evolution of ISC capabilities including identity lifecycle management, access governance, certifications, monitoring, standards and policy enforcement.

• Partner with vendors and internal engineering teams to resolve complex platform and integration issues.

Role-Based Access Control (RBAC)

• Maintain and extend frameworks to ensure roles remain current, risk-aware, and aligned to least-privilege principles.

• Support the roles team in the extension of the RBAC model across Wellington and advise on new and revised platform capabilities that can be applied in the role model and application of least priviliege

Identity Governance & Monitoring

• Ensure SailPoint ISC is effectively monitoring, detecting, and alerting inappropriate or unauthorized access.

• Support and enhance access certification campaigns, policy enforcement, and audit readiness.

• Continuously assess and adopt new SailPoint ISC features that add measurable business or security value.
• Own platform monitoring capabilities across on network and cloud resources

Application & Data Integrations

• Lead the integration of new applications, platforms, and data sources into SailPoint ISC.

• Define and maintain standardized integration patterns and onboarding models for application teams.

• Develop and promote database and data access governance strategies aligned with least privilege and regulatory expectations.

Joiner, Mover, Leaver (JML) Automation

• Extend current Joiner, Mover, and Leaver processes using SailPoint ISC functional capabilities.

• Ensure Joiners receive appropriate access on day one, movers are automatically detected and reviewed, and leavers are deprovisioned in a timely and controlled manner.

• Work with upstream and downstream system owners to ensure JML dependencies are understood and consistently followed.

Legacy Tool Migration & Transformation

• Support the assessment and migration of legacy IAM / IAG toolsets into SailPoint ISC where applicable.

• Define migration approaches, capability mapping, and stakeholder communication plans.

• Partner with Service Now teams to ensure request and fulfilment workflows align with SailPoint ISC role and lifecycle models.

Skills & Experience

Required

• 5+ years' experience in Identity & Access Management / Identity Governance

• Strong hands-on experience with SailPoint Identity Security Cloud (ISC) (or SailPoint IIQ with demonstrated cloud transition experience).
• Proven Active Directory knowledge and administration; including Entra

• Proven experience delivering RBAC, access certifications, lifecycle automation, and application integrations at scale.

• Experience integrating IAM platforms with HR systems, Active Directory, applications, and databases.

• Strong understanding of identity lifecycle management, provisioning, and de-provisioning workflows.
• Ability to apply all of the above using Java or Power Shell as required

• Excellent communication skills with the ability to translate complex technical concepts for business and security stakeholders.

• Experience working in global, matrix-managed teams across multiple time zones.

Nice to Have

• Experience migrating from legacy IAG tools

• Working knowledge of Service Now request and fulfilment workflows.

• Database platforms and concepts (e.g. Oracle, SQL).

• API-based integrations and identity context sharing.

• Security certifications such as CISSP, CISM, or equivalent.

Team & Ways of Working

• Comfortable operating in a highly regulated, fast-paced environment with complex dependencies.

• Strong problem-solving skills with the confidence to challenge existing approaches constructively.

• Collaborative mindset with a focus on continuous improvement and long-term platform sustainability.
• Ability to work in a matrix managed global team while remaining focus on deliverable and scope