SailPoint IAM Engineer

SailPoint IAM Engineer

Contract Length

12 Months

Location

New York, NY

Work Setup

Hybrid — On-site with telecommuting up to 2 days per week]

Hours

37.5/wk

**In-person interview is required**

Join an enterprise cybersecurity team focused on modernizing Identity and Access Management (IAM) across hybrid cloud and on-premises environments. The SailPoint IAM Engineer will provide hands-on engineering and architecture expertise across SailPoint IdentityIQ (IIQ), Identity Security Cloud (ISC), identity lifecycle management, access governance, and ServiceNow integrations.

SailPoint IAM Engineer Responsibilities

• Design, develop, administer, and modernize SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC) solutions, including IIQ-to-ISC migration.
• Develop BeanShell rules, Java components, workflows, lifecycle events, connectors, provisioning adapters, APIs, SCIM integrations, and application onboarding frameworks.
• Architect joiner/mover/leaver automation, RBAC/ABAC, role modeling, certifications, SoD controls, and entitlement management.
• Integrate SailPoint with ServiceNow, Active Directory, LDAP, Microsoft Entra ID/Azure AD, PIM, HR systems, PAM platforms, and AWS/Azure/GCP.
• Engineer ServiceNow access requests, approvals, provisioning/deprovisioning, incident workflows, and change-management integrations.
• Implement authentication and federation using SAML, OAuth, OIDC, MFA, and Okta, including Citizen IAM use cases.
• Apply Zero Trust and least-privilege principles while supporting SOX, HIPAA, ISO 27001, and NIST-aligned controls.
• Support production environments through troubleshooting, patching, upgrades, performance tuning, and root-cause analysis.

SailPoint IAM Engineer Qualifications

Critical Qualifications

• Strong hands-on expertise with SailPoint IdentityIQ and SailPoint Identity Security Cloud, including development and administration.
• Advanced experience with IAM architecture, identity lifecycle automation, access governance, provisioning, and application onboarding.
• Development experience with BeanShell, Java, REST/SOAP APIs, and SCIM.
• Experience integrating IAM platforms with ServiceNow, Active Directory, Entra ID/Azure AD, and cloud environments.
• Strong knowledge of RBAC/ABAC, Zero Trust, least privilege, SAML, OAuth, OIDC, MFA, and identity governance.

Preferred / Nice-to-Have Qualifications

• Experience with Okta and Citizen IAM solutions.
• SailPoint IIQ-to-ISC migration experience.
• Familiarity with SailPoint Access History, Access Modeling, PAM technologies, and compliance frameworks.
• Experience with IAM architecture reviews, threat modeling, roadmap planning, and modernization initiatives.

The SailPoint IAM Engineer will play a key role in delivering secure, scalable, and compliant enterprise identity solutions.

We look forward to reviewing your application!