SailPoint Engineer (IIQ/ISC) - (Remote in the US)
General Description
We're looking for an Implementation Engineer to design, build, and deploy identity governance solutions on the SailPoint platform, including IdentityIQ (IIQ) and/or Identity Security Cloud (ISC). This is a hands-on technical role with plenty of client interaction. You'll be part of a small, collaborative team where your work is visible and your input shapes how we deliver.
About the IGA Practice
Our team of Practice Leads, Managing Security Consultants, Architects, and Engineers focus on SailPoint IIQ/ISC, Saviynt, C1, and Lumos engagements for external clients.
Roles and Responsibilities:
Implement and configure SailPoint IIQ and ISC solutions, including identity lifecycle management, access certifications, access requests, provisioning, and password management
Build and maintain application onboarding: connectors, aggregation, correlation, and account/entitlement mapping
Develop rules, workflows, forms, and transforms (BeanShell/Java for IIQ; transforms, rules, and workflows for ISC)
Design and support IIQ-to-ISC migrations, including assessment, gap analysis, and cutover planning
Integrate SailPoint with source systems such as Active Directory, Entra ID, Okta, HR platforms (Workday, SuccessFactors), ServiceNow, SAP, databases, and SaaS applications
Work with client stakeholders to gather requirements, run design sessions, and translate business needs into technical designs
Write clear technical documentation, including design documents, configuration guides, test plans, and runbooks
Support UAT, deployment, and hypercare, and troubleshoot issues across environments
Follow SailPoint best practices for configuration management, version control, and promotion across dev/test/prod
Mentor junior engineers and contribute to reusable accelerators, templates, and internal knowledge
Required Experience and Education:
5+ years of hands-on experience implementing SailPoint IdentityIQ and/or Identity Security Cloud
Working knowledge of both platforms, with depth in at least one
Strong understanding of IAM/IGA concepts: joiner/mover/leaver, RBAC, role mining, SoD, certifications, and least privilege
Experience with IIQ development (Java, BeanShell, XML artifacts) or ISC configuration (transforms, rules, REST APIs, VA management)
Experience with connectors and integration patterns (LDAP/AD, JDBC, delimited file, web services/REST, SCIM)
Solid SQL and scripting skills, plus familiarity with JSON, XML, and REST APIs
Strong written and verbal communication, with the ability to explain technical concepts to non-technical audiences
Comfortable working independently in a remote, distributed team
Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
Preferred Experience and Education
Consulting or professional services experience, including client-facing delivery, scoping, and managing multiple engagements
SailPoint certifications (e.g., IdentityIQ Engineer, Identity Security Cloud Engineer)
Experience leading or contributing to IIQ-to-ISC migrations
Familiarity with Git, CI/CD, and SSB or similar configuration management tools
Knowledge of adjacent identity technologies (PAM, Access Management, SSO, MFA)
Experience in regulated industries (financial services, healthcare, government)
Background in Java development, Linux/Windows administration, or application servers (Tomcat, WebLogic)
Travel Requirements:
Up to 10% travel
Physical Requirements:
Sedentary work
Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day