ABOUT THE ROLE
This is a development-heavy IAM engineering role for a hands-on SailPoint IIQ practitioner. You will design, build, and implement identity solutions — owning the full development lifecycle from requirements through to post-production support. Operational support is minimal; the expectation is that you write code, build workflows, and solve hard identity problems.
KEY RESPONSIBILITIES
SailPoint IIQ Development (70%)
-
Design, develop, and implement SailPoint IIQ solutions including workflows, rules, and connectors
-
Build and enhance Joiner, Mover, Leaver (JML) lifecycle workflows end-to-end
-
Develop automation using APIs, custom connectors, and SailPoint OOTB connectors
-
Work across the full SDLC: requirements gathering, development, UAT support, security reviews, production deployment, and post-production support
-
Prepare deployment artifacts, technical documentation, and operational runbooks
-
Support critical P1/P2 incidents when escalated
SSO & Federation Integration (30%)
-
Configure and support SSO integrations using Ping Identity (preferred), ADFS, or equivalent platforms
-
Implement and troubleshoot federation using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC)
-
Collaborate with application and infrastructure teams during SSO onboarding
Governance & Lifecycle Management
-
Implement and maintain access governance frameworks including access certifications and SoD controls
-
Support RBAC modelling and entitlement management within SailPoint IIQ
-
Collaborate with operations teams during deployment windows and change cycles
REQUIRED SKILLS & EXPERIENCE
Non-Negotiable
-
8+ years of overall IT experience
-
4+ years of hands-on SailPoint IIQ development — workflows, rules, BeanShell, connectors
-
2+ years of SSO implementation experience; Ping Identity strongly preferred
-
Strong development proficiency: Java, PowerShell, REST API integrations
-
Deep understanding of SailPoint Lifecycle Management (JML), Access Governance, and OOTB connectors
-
Proven experience across the complete SDLC in an enterprise environment
-
Working knowledge of SAML 2.0, OAuth 2.0, and OIDC
Good to Have
-
Experience with SailPoint Identity Security Cloud (ISC)
-
Exposure to PAM tools (CyberArk, BeyondTrust)
-
Background in banking, financial services, or regulated sectors
-
SailPoint certifications (IdentityIQ Engineer or equivalent)
