Track Manager - Sailpoint IIQ, Java, SailPoint FAM

Job Summary

The SailPoint L3 Engineer is responsible for the design, development, implementation, and optimization of SailPoint Identity Security Cloud (ISC) / IdentityIQ (IIQ) solutions. The role provides advanced technical expertise for complex identity governance initiatives, application onboarding, RBAC/ABAC implementation, workflow development, automation, and platform modernization. The engineer will act as the technical escalation point for L2 teams, work closely with architects and business stakeholders, and lead engineering activities related to identity lifecycle management, governance, compliance, and enterprise application integrations

Key Responsibilities

SailPoint Engineering & Development Design, develop, and support SailPoint ISC/IIQ solutions and custom integrations. Build and enhance provisioning workflows, lifecycle events, approval processes, and access governance controls. Develop and maintain custom connectors, rules, transforms, and API-based integrations. Implement identity lifecycle automation for Joiner, Mover, and Leaver processes. Application Onboarding & Integrations Lead end-to-end onboarding of applications into SailPoint. Configure connectors, schemas, account aggregation, entitlement mapping, and provisioning policies. Integrate SailPoint with Active Directory, Entra ID (Azure AD), ServiceNow, LDAP, JDBC, SCIM, REST APIs, and cloud applications. Support complex integration requirements and troubleshooting activities. Identity Governance & Compliance Design and implement RBAC, ABAC, role mining, and entitlement management frameworks. Configure certification campaigns, policy violations, Segregation of Duties (SoD), and governance controls. Support audit, compliance, security, and regulatory requirements. Drive continuous improvements to identity governance processes. Platform Modernization & Automation Support migration activities from IdentityIQ to Identity Security Cloud (ISC). Develop automation solutions using SailPoint APIs, PowerShell, Python, and DevOps tools. Implement CI/CD practices for SailPoint deployments. Participate in platform upgrades, patching, and modernization initiatives.

Skill Requirements

 Experience 6 to 10 years of experience in Identity and Access Management (IAM). Minimum 4+ years of hands-on SailPoint IdentityIQ or Identity Security Cloud (ISC) experience. Experience in large-scale enterprise IAM implementations and operations. Experience leading application onboarding and SailPoint engineering projects. Technical Skills SailPoint Expertise SailPoint Identity Security Cloud (ISC) / IdentityNow. SailPoint IdentityIQ (IIQ). Role-Based Access Control (RBAC). Attribute-Based Access Control (ABAC). Access Certifications and Governance. Identity Lifecycle Management (JML). Provisioning and Deprovisioning workflows. Role Engineering and Entitlement Management. Integration & Development REST APIs and SCIM 2.0. SailPoint APIs. Java and BeanShell (for IIQ environments). PowerShell and Python scripting. JSON, XML, and Web Services. Connector development and troubleshooting.

Other Requirements

SailPoint Certified Identity Security Engineer (ISC) or SailPoint IdentityIQ Certification. Experience with CyberArk, BeyondTrust, Ping Identity, Okta, or Microsoft Entra Governance. Experience with Azure DevOps, GitHub, Terraform, and CI/CD automation. Knowledge of Zero Trust architecture and modern IAM frameworks. Experience with Datadog, Splunk, or enterprise observability platforms. Exposure to cloud security and multi-cloud identity integrations (Azure, AWS, GCP). Experience in role mining, access analytics, SoD optimization, and governance transformation programs. ITIL Foundation or ITIL Intermediate certification. Experience working in global managed services and large enterprise environments. Exposure to AI-driven IAM automation and advanced identity analytics.