SailPoint IdentityIQ Engineer

Roles & Responsibilities

Summary

• Support the design, development, implementation, and ongoing support of SailPoint IdentityIQ (IIQ) and Identity Governance & Administration (IGA) solutions.
• Develop and maintain IAM capabilities covering identity lifecycle management, application onboarding, access requests, provisioning, certifications, RBAC, and SoD.
• Work closely with IAM, application, infrastructure, security, and business teams to deliver secure and scalable identity solutions.
• Participate in IAM transformation initiatives, automation projects, production support, and continuous improvement activities.

Key Responsibilities

• Configure and customize SailPoint IdentityIQ, including Lifecycle Manager (LCM), Compliance Manager, workflows, rules, policies, roles, and certification campaigns.
• Develop BeanShell/Java-based rules and customizations to support identity lifecycle, provisioning, approvals, correlation, and access governance requirements.
• Onboard and integrate enterprise applications using connectors such as Web Services, JDBC, LDAP/Active Directory, Workday, and flat-file integrations.
• Configure application schemas, account aggregation, correlation rules, identity refresh, provisioning policies, and lifecycle events.
• Implement and maintain RBAC, entitlement models, access profiles, SoD controls, and access certification processes.
• Develop and enhance IAM workflows for access requests, approvals, Joiner-Mover-Leaver (JML) processes, notifications, and provisioning.
• Troubleshoot and resolve issues involving aggregation, provisioning, workflows, connectors, identity correlation, access requests, and system integrations.
• Develop and execute SIT/UAT test scenarios, including positive, negative, approval, provisioning, and unauthorized-access scenarios.
• Support REST/API integrations and troubleshoot connectivity, authentication, data-mapping, and provisioning issues.
• Perform production support activities including incident investigation, log analysis, root-cause analysis, remediation, and post-release validation.
• Support IAM platform upgrades, patches, vulnerability remediation, health checks, and operational readiness activities.
• Prepare technical documentation including solution designs, configuration documents, SOPs, operational runbooks, and knowledge-transfer materials.
• Work within Agile delivery teams and participate in sprint planning, backlog refinement, daily stand-ups, reviews, and retrospectives.
• Provide technical guidance to junior engineers and support teams on SailPoint IIQ configuration, troubleshooting, and incident resolution.

Skillset - Must Have

• 4+ years of hands-on SailPoint IdentityIQ experience.
• Strong experience with SailPoint IIQ LCM and Compliance Manager.
• Strong understanding of Identity Governance & Administration (IGA) concepts.
• Hands-on experience with workflows, rules, BeanShell/Java, lifecycle events, provisioning policies, roles, and certifications.
• Experience with application onboarding and enterprise connectors including Web Services, JDBC, LDAP/AD, Workday, and flat files.
• Strong understanding of identity lifecycle management, JML, RBAC, SoD, access requests, provisioning, and access certifications.
• Experience troubleshooting SailPoint IIQ application, connector, aggregation, workflow, and provisioning issues.
• Good understanding of REST APIs, JSON, authentication, and enterprise integrations.
• Experience with SIT, UAT, production deployment, incident management, and technical documentation.
• Ability to work with IAM, cybersecurity, application, infrastructure, and business stakeholders.
• Experience working in Agile/Scrum environments.
• Strong analytical, troubleshooting, communication, and problem-solving skills.

Preferred / Good to Have

• SailPoint Certified IdentityIQ Engineer/Developer or relevant IAM certification.
• Experience with SailPoint Identity Security Cloud (ISC).
• Knowledge of OAuth 2.0, OIDC, SAML, SCIM, and API security.
• Experience with SQL, Java, Python, scripting, or automation.
• Exposure to CI/CD, DevSecOps, cloud IAM, and IAM platform modernization.
• Experience in banking, financial services, insurance, or other regulated environments.