SailPoint Engineer - Identity & Access Management

Roles & Responsibilities:

- Design, implement, and maintain enterprise Identity & Access Management (IAM) solutions using platforms such as SailPoint, Microsoft Entra ID, and Active Directory.

- Build and automate Joiner, Mover, and Leaver (JML) workflows to streamline employee onboarding, role changes, and offboarding.

- Develop automated user provisioning and deprovisioning processes to ensure timely and policy-driven access management.

- Integrate enterprise applications with IAM platforms using APIs, SCIM, LDAP, and other identity integration technologies.

- Configure and manage Single Sign-On (SSO) and authentication protocols including SAML, OAuth 2.0, and OpenID Connect (OIDC).

- Design and maintain Role-Based Access Control (RBAC) models, birthright access, and least-privilege access policies.

- Implement identity governance processes, including access approvals, certification campaigns, audit logging, and compliance controls.

- Develop custom workflows, rules, transforms, and automation using SailPoint and scripting languages such as PowerShell, Java, or Python.

- Troubleshoot provisioning failures, authentication issues, synchronization problems, and connector-related incidents while performing root cause analysis.

- Collaborate with HR, IT Infrastructure, Security, DevOps, and application teams to onboard applications and manage identity lifecycle processes.

- Create and maintain technical documentation, operational runbooks, and knowledge repositories to support platform operations.

- Continuously enhance identity platform security, scalability, automation, and operational efficiency by following enterprise IAM best practices.

Ideal Candidate:

- 5+ years of experience engineering enterprise Identity & Access Management platforms, including 3+ years of hands-on experience with SailPoint IdentityIQ or Identity Security Cloud.

- Strong experience designing and automating Joiner, Mover, and Leaver (JML) lifecycle processes.

- Proven experience onboarding enterprise applications into an Identity Governance and Administration (IGA) platform with RBAC, birthright access, and request-based access models.

- Hands-on experience provisioning and deprovisioning user access across Microsoft Entra ID, Active Directory, and enterprise applications.

- Strong understanding of authentication and federation technologies, including SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, and directory synchronization.

- Experience integrating identity platforms with HR systems and enterprise applications using APIs, SCIM, connectors, and automation frameworks.

- Proficiency in developing SailPoint workflows, rules, transforms, policies, and customizations.

- Experience with scripting languages such as PowerShell, Java, or Python to automate IAM processes.

- Strong understanding of identity governance, access certification, compliance, security controls, and IAM best practices.

- Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.

- Experience contributing to technical documentation, knowledge bases, operational standards, and continuous platform improvement will be an added advantage.

Perks, Benefits & Culture:

- Build and enhance enterprise-scale Identity and Access Management platforms that secure critical business applications.

- Work with modern IAM technologies including SailPoint, Microsoft Entra ID, Active Directory, SSO, and Identity Governance.

- Collaborate with cross-functional Security, Infrastructure, DevOps, and Engineering teams on large-scale identity transformation initiatives.

- Opportunity to drive automation, security, and operational excellence across enterprise identity platforms.

- Continuous learning, certification support, and career growth in a collaborative engineering environment.

- Competitive compensation, ownership of critical security initiatives, and opportunities to work on cutting-edge Identity and Zero Trust solutions.

(ref:hirist.tech)