Sailpoint ISC Consultant

Title:
Cybersecurity IAM Engineer / SailPoint Identity IQ

Location: NYC NY

On-site/Remote/Hybrid: Hybrid (3 days onsite/2 days remote)

Duration: 12 Months

Interview Process: Webcam or In-Person

The Cybersecurity IAM Engineer / SailPoint Identity IQ and Identity Security Cloud Developer & Architect is responsible for designing, engineering, and modernizing enterprise identity governance capabilities across hybrid cloud and on prem environments. This role blends deep SailPoint Identity IQ and Identity Security Cloud development with IAM architecture leadership, including lifecycle automation, integration patterns, governance frameworks, and Service Now workflow orchestration.

The engineer will serve as a technical authority for identity lifecycle, access governance, directory integrations, and SailPoint platform architecture—ensuring secure, scalable, and compliant IAM operations aligned with Zero Trust principles.

SailPoint IIQ and ISC Developer/Administrator with Okta and Citizen IAM

We're looking for a talented SailPoint IIQ and ISC Developer/Administrator to join our team. You'll play a key role in developing, administering, and maintaining our identity and access management (IAM) solutions, ensuring secure and efficient access across our organization. Expertise in Okta and Citizen IAM initiatives is a strong plus.

• Design, implement, and maintain SailPoint IIQ and ISC solutions
• Develop and automate workflows, connectors, and application onboarding
• Administer and support Microsoft Entra  (Azure AD), including Privileged Identity Management (PIM)
• Integrate IAM systems with cloud platforms such as AWS, Azure, or GCP
• Implement and manage Okta solutions, with a focus on Citizen IAM and external user identity needs
• Conduct code reviews to eliminate redundancies and optimize system logic
• Identify and address IAM vulnerabilities early in the development process
• Collaborate with IT stakeholders and business owners to mature Role-Based Access Control (RBAC) and application onboarding programs
• Manage and integrate APIs, privilege access management (PAM) tools, SailPoint Access History, SailPoint Access Modeling and database platforms
• Test, deploy, and recommend patches and upgrades for IAM systems
• Migration from IIQ to ISC for the upcoming project

• Develop and maintain Bean Shell rules, custom workflows, lifecycle event logic, task definitions, and plugin modules.
• Engineer custom connectors, aggregation jobs, reconciliation logic, and provisioning adapters.
• Build scalable application onboarding frameworks, entitlement schemas, and role models.
• Implement and optimize certification campaigns, policy enforcement, SoD controls, and governance reporting.
• Extend IIQ using Java, REST APIs, SCIM, and custom UI components.
• Define and maintain end to end IAM architecture, including identity sources, directories, governance layers, and provisioning flows.
• Architect scalable identity lifecycle frameworks supporting joiner/mover/leaver automation, authoritative source alignment, and attribute driven access.
• Design integration patterns between SailPoint IIQ and Service Now, including:
  • Access request workflows
  • Automated ticket creation and closure
  • Incident and change management alignment
  • Catalog item governance and approval routing
• Establish RBAC/ABAC frameworks, role mining strategies, and access modeling standards.
• Create architectural diagrams, data flow maps, and governance models for enterprise IAM programs.
• Evaluate modernization opportunities (e.g., SailPoint SaaS, passwordless, adaptive risk, Service Now IAM modules).
• Lead design reviews, threat modeling sessions, and IAM roadmap planning with cybersecurity leadership.

• Architect and implement integrations with Active Directory, LDAP, Azure AD/Entra , HR systems, cloud applications, and Service Now.
• Develop REST/SOAP integrations, SCIM connectors, and custom provisioning logic.
• Implement authentication and federation patterns using SAML, OAuth, OIDC, and MFA platforms.
• Ensure directory hygiene, identity data quality, and lifecycle accuracy across systems.