SailPoint IIQ/ ISC Solution Architect (Contract)

We are currently looking for a SailPoint Solution Architect (IIQ & ISC) to join KeyData’s Delivery team! In this role, you will be responsible for leading the architecture, design, advisory, and implementation of SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC) solutions for enterprise customers. You will serve as a trusted advisor, helping organizations mature their identity governance programs, modernize identity security capabilities, and implement scalable identity architectures aligned with business and security objectives. This role combines deep technical expertise across SailPoint platforms with strategic advisory, solution architecture, and hands-on delivery leadership to drive successful identity transformation initiatives. If you're passionate about working in an environment where you can experience accelerated growth, development, and high impact, this role could be for you!

Location: Canada

Employment Type: 12 months contract, Remote

Vacancy Status:   High Priority, Immediate Opening: This position is currently available, and hiring is underway.

What You'll Do:

Lead architecture, design, and implementation of SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC) solutions

Serve as a trusted advisor to customers and implementation partners on identity governance, access management, and identity security programs

Assess customers’ current identity landscape and develop strategic IAM and IGA roadmaps

Gather business requirements and translate them into scalable SailPoint solution designs

Design and implement identity lifecycle management, provisioning, access requests, certifications, role management, and governance processes

Architect Role-Based Access Control (RBAC) models and enterprise application onboarding programs

Lead onboarding of SaaS, cloud, API-based, and enterprise applications into SailPoint platforms

Design and implement integrations using SailPoint connectors, REST APIs, SCIM, web services, LDAP, and enterprise integration technologies

Architect integrations with Active Directory, Azure AD/Entra ID, Workday, ServiceNow, SAP, HR systems, and other enterprise applications

Configure and optimize Identity Profiles, Access Profiles, Roles, Lifecycle States, Governance Groups, Workflows, Transforms, and Identity Governance processes

Design and implement certification campaigns, access reviews, policy governance, and compliance controls

Educate customers and partners on SailPoint architecture, implementation methodologies, and industry best practices

Conduct solution workshops, architecture reviews, technical advisory sessions, and roadmap discussions

Review and guide custom development, rules, workflows, integrations, and extensibility solutions

Advise customers on customization approaches, platform capabilities, and implementation trade-offs

Identify product adoption gaps and recommend strategies to maximize platform utilization and governance maturity

Develop architecture documentation, implementation strategies, governance frameworks, and operational runbooks

Mentor consultants, engineers, and implementation teams on SailPoint and IAM best practices

Collaborate with delivery, engineering, security, and customer stakeholders to ensure successful project outcomes

Who We're Looking For:

8+ years of experience in IAM, Identity Governance, Cybersecurity Consulting, or Enterprise Identity Architecture

Minimum 5+ years of hands-on experience implementing SailPoint IdentityIQ (IIQ), SailPoint Identity Security Cloud (ISC), or both

Strong experience architecting and implementing SailPoint identity governance solutions in enterprise environments

Expertise in identity lifecycle management, provisioning, certifications, access governance, role management, and compliance controls

Experience with SailPoint IIQ configuration, customization, workflows, rules, application onboarding, and integrations

Experience with SailPoint ISC components including Identity Profiles, Access Profiles, Roles, Governance Groups, Lifecycle States, Workflows, and Transforms

Strong understanding of RBAC, ABAC, Segregation of Duties (SoD), least-privilege access, and identity governance principles

Experience onboarding applications using SailPoint connectors, APIs, SaaS integrations, and custom integration frameworks

Hands-on experience with REST APIs, SCIM, XML, SOAP/SPML, LDAP, JSON, and enterprise integration technologies

Experience with Java, BeanShell, JavaScript, PowerShell, or other scripting and development technologies

Experience integrating SailPoint with Active Directory, Azure AD/Entra ID, Workday, SAP, ServiceNow, HR systems, and cloud applications

Experience performing identity maturity assessments and defining strategic IAM roadmaps

Strong communication, consulting, presentation, and stakeholder management skills

Experience leading customer-facing architecture and implementation engagements

Bachelor's degree in Computer Science, STEM, Information Technology, Engineering, or related field preferred

English language proficiency required

Nice-to-Have Skills:

SailPoint Certified Engineer, IdentityIQ Engineer, or Identity Security Cloud (ISC) certification

Experience working across both SailPoint IdentityIQ and Identity Security Cloud platforms

Experience with AWS, Azure, and GCP cloud environments

Experience with SailPoint Workflows, Transforms, AI-driven governance capabilities, and advanced analytics

Knowledge of identity threat detection, governance reporting, and compliance frameworks

Experience with DevOps, CI/CD pipelines, Infrastructure-as-Code, or Terraform

CISSP, TOGAF, or other security and architecture certifications

Experience leading enterprise IAM modernization, cloud migration, or identity transformation initiatives

Experience mentoring technical teams and driving IAM governance best practices across organizations

Compensation: The hourly rate range for this position is $70–$77 CAD per hour. The final rate will be determined based on the candidate’s experience, overall fit for the role, and expected ramp-up time. This is a 12-month, full-time contract role, working 40 hours a week. At KeyData Cyber, we are committed to fair and competitive compensation. We regularly benchmark across positions, industries, sectors, and experience levels, ensuring our approach recognizes each person’s unique strengths, contributions, and the value they bring to the organization #LI-AS1