Senior Identity Governance Engineer (SailPoint ISC)

About the role

We are seeking a hands-on SailPoint ISC Engineer to own the technical and functional delivery of SailPoint Identity Security Cloud across identity lifecycle management, application onboarding, nonemployee governance, access certifications, segregation of duties, and data access security. This role requires strong SailPoint expertise, clear communication, and end-to-end ownership to translate business, audit, security, and application needs into scalable solutions while driving risks, defects, and remediation to closure.

Responsibilities

• Configure and support SailPoint ISC identity profiles, sources, lifecycle states, access profiles, roles, provisioning, certifications, workflows, transforms, forms, event triggers, and notifications.
• Build and support employee, contractor, and nonemployee lifecycle processes, including joiner, mover, leaver, rehire, conversion, leave, termination, extension, expiration, and deprovisioning.
• Lead application onboarding from discovery through production, including schemas, aggregation, correlation, provisioning, approvals, certifications, testing, documentation, and operational handoff.
• Develop integrations using native connectors, REST APIs, SCIM, JDBC, web services, flat files, webhooks, event triggers, and automation.
• Design and maintain SoD rules, conflict matrices, risk models, certifications, exceptions, mitigating controls, and remediation processes.
• Support SailPoint NERM, Data Access Security, DSPM, DLP, privacy, data catalog, and sensitive-data governance use cases.
• Troubleshoot identity processing, aggregation, correlation, provisioning, workflows, APIs, connectors, transforms, and data-quality issues.
• Review designs and configurations from developers and partners, maintain documentation and runbooks, and report status, risks, blockers, decisions, and escalations.

Requirements

• 7+ years in IAM, identity governance, identity engineering, or access management.
• 4+ years of hands-on SailPoint experience, including recent SailPoint ISC experience.
• Experience with SailPoint NERM or similar contractor and third-party governance platforms.
• Deep knowledge of SailPoint ISC sources, identity profiles, lifecycle states, access profiles, roles, certifications, workflows, transforms, provisioning, and access requests.
• Strong understanding of aggregation, correlation, provisioning, reconciliation, entitlement governance, RBAC, toxic combinations, risk-based reviews, and SoD remediation.
• Experience integrating SailPoint with HR systems, AD, Microsoft Entra ID, Okta, ServiceNow, SaaS, databases, REST APIs, SCIM, JDBC, and flat files.
• Working knowledge of REST, JSON, OAuth 2.0, SCIM, SQL, PowerShell, JavaScript, Python, Java, Git, and secure integration patterns.
• Excellent communication, ownership, urgency, follow-through, and ability to drive complex technical issues to closure.

Preferred Qualifications

• Experience with SailPoint IIQ-to-ISC migrations.
• Familiarity with SailPoint ARM, Data Access Security, SAP or Oracle SoD, privileged access, nonhuman identities, DSPM, or SailPoint certifications.

Pay

Pay Range: $103,200–$144,000

Location & Schedule

• Location Options: Mettawa, IL or Milwaukee, WI or Fond du Lac, WI or Menomonee Falls, WI
• Workplace Category: Hybrid (3 days on site required)
• Travel Required: Minimal
• Direct Reports: None

Visa Sponsorship: Applicants must be currently authorized to work in the United States; this position is not eligible for employment visa sponsorship now or in the future. Relocation is generally not offered but may be considered on a case-by-case basis.