Senior IAM Developer / SailPoint IdentityNow Engineer

About the role

Responsible for designing, implementing, and supporting enterprise IAM solutions. Automate identity lifecycle processes and ensure compliance with security and regulatory requirements.

Responsibilities

• Design, develop, and support SailPoint IdentityNow solutions for enterprise IAM programs.
• Build and maintain integrations with Active Directory, LDAP, HR systems, cloud platforms, and business applications.
• Develop and enhance provisioning workflows, deprovisioning workflows, and access governance workflows.
• Configure and manage certification campaigns, access reviews, and compliance controls.
• Implement and maintain RBAC and ABAC models across enterprise applications and cloud environments.
• Develop custom workflows, API integrations, and automation using REST APIs, PowerShell, and Python.
• Automate user onboarding, role changes, and offboarding.
• Troubleshoot IAM-related incidents and resolve access and provisioning issues.
• Collaborate with Security, Infrastructure, Audit, and Compliance teams.
• Ensure adherence to SOX, GDPR, and organizational security standards.
• Create technical documentation, operational runbooks, and deployment procedures.
• Support IAM platform upgrades, connector deployments, and integration enhancements.

Requirements

• 10+ years of experience in Identity and Access Management (IAM).
• 5+ years of hands-on experience with SailPoint IdentityNow / Identity Security Cloud.
• Strong experience with Okta, Microsoft Entra ID / Azure AD, Active Directory, LDAP, and Ping Identity.
• Experience integrating IAM solutions with HR systems such as Workday, ADP, Oracle HCM, and Paylocity.
• Experience implementing IAM solutions in cloud environments, including GCP IAM.
• Proven experience with Identity Lifecycle Management, including Joiner, Mover, Leaver processes.
• Expertise in Access Governance, Certification Campaigns, RBAC, and Access Request Management.

Required Technical Skills

• Identity & Access Management: SailPoint IdentityNow / Identity Security Cloud, Identity Governance & Administration (IGA), Access Certification & Compliance, User Provisioning & Deprovisioning, Joiner-Mover-Leaver (JML) Lifecycle Management, Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC)
• IAM & Security Technologies: Okta, Microsoft Entra ID / Azure AD, Ping Identity (PingOne, PingAccess), Active Directory, LDAP, SCIM
• Cloud & Infrastructure: GCP IAM, Terraform
• Development & Scripting: REST APIs, PowerShell, Python, Java / J2EE, JSON, Web Services
• Tools: ServiceNow, Postman, VS Code, Eclipse, JDBC Connectors

Preferred Qualifications

• Experience in Financial Services, Healthcare, or other regulated industries.
• Experience with non-employee identity management.
• Experience with third-party access governance.
• Knowledge of IAM security frameworks and compliance standards.
• Strong communication and stakeholder management skills.
• Ability to mentor junior IAM engineers and lead IAM initiatives.

Nice-to-Have Skills

• Ping Identity Administration
• Advanced Terraform Automation
• Cloud Security and Governance
• Identity Security Cloud Migrations
• ServiceNow Integration Development
• Audit and Compliance Management