Senior Sailpoint Engineer

Job Summary JOB DESCRIPTION Argano is seeking an experienced SailPoint Engineer to design, build, and operate our identity governance program on SailPoint Identity Security Cloud (ISC). This is a hands-on engineering role for someone who has already worked at real enterprise scale—our managed identity population exceeds 400,000 users—and is comfortable owning the technical depth of a large, complex SailPoint environment: connectors and integrations, identity lifecycle automation, access certifications, role and policy design, and day-to-day platform reliability. The SailPoint Engineer will partner closely with security, IT operations, application owners, HR systems teams, and compliance stakeholders to ensure the right people have the right access at the right time—and that we can prove it during an audit. Responsibilities Design, configure, and maintain SailPoint Identity Security Cloud (ISC) across identity sources, applications, and provisioning connectorsOwn end-to-end Joiner-Mover-Leaver (JML) lifecycle automation, integrating with HR systems (e.g., Workday), Active Directory / Entra ID, LDAP, and downstream applicationsDesign and maintain Role-Based Access Control (RBAC) models, Separation of Duties (SoD) policies, and birthright/entitlement structures at enterprise scaleBuild and tune access certification campaigns, ensuring accurate, auditable, and timely recertification cycles across a large and diverse application portfolioDevelop and support custom and out-of-the-box connectors, workflows, and integrations (REST/SCIM/SOAP APIs) to onboard new applications into governanceTroubleshoot provisioning, aggregation, and certification issues across a high-volume identity population, balancing performance, accuracy, and compliancePartner with security and compliance teams to support SOX, SOC 2, and other audit requirements, providing evidence and remediating findingsCollaborate with application owners and business stakeholders to translate access governance requirements into scalable SailPoint solutionsContribute to the platform roadmap: recommend improvements, evaluate new SailPoint capabilities, and help mature governance maturity across the organizationDocument architecture, configurations, and standard operating procedures; participate in on-call/escalation support for critical identity platform issues Education Bachelor's degree in Computer Science, Information Security, or a related field preferred; equivalent practical experience will also be considered. LOCATION: This is an onsite position based in Seattle, WA or Orlando, FL. Candidates must be able to work onsite from either of these locations. Experience 5+ years of overall experience in Identity and Access Management (IAM), with a strong preference for candidates whose background is concentrated in Identity Governance and Administration (IGA) specifically2+ years of hands-on experience with SailPoint Identity Security Cloud (ISC)—the SaaS/cloud platform (formerly IdentityNow)—configuring sources, provisioning, access profiles, roles, workflows, and certification campaignsDemonstrated experience supporting a large identity population—100,000+ managed identities—including the operational and performance challenges that come with scale (aggregation windows, certification campaign design, connector throughput, etc.)Proven experience operating in a complex, matrixed enterprise environment with a large, heterogeneous application portfolio, multiple business units, and competing stakeholder prioritiesSolid understanding of identity lifecycle management and JML processes, including integration with HR systems and directory services (Active Directory, Entra ID/Azure AD, LDAP)Working knowledge of RBAC and/or ABAC modeling, SoD policy design, and access certification/attestation best practicesExperience with API-based integrations (REST, SCIM, SOAP) for connector development and troubleshootingStrong troubleshooting skills and comfort owning production issues in a platform that many other teams depend on. Preferred Qualifications SailPoint Certified IdentityNow Engineer, SailPoint Certified Implementation Engineer (ISC), or equivalent SailPoint certificationPrior experience with SailPoint IdentityIQ (IIQ) in addition to ISC, particularly if you've supported a migration from IIQ to ISCExperience in a regulated industry (financial services, healthcare, insurance, etc.) supporting SOX, HIPAA, or similar compliance frameworksFamiliarity with scripting/automation (PowerShell, Python, or Beanshell) for custom connectors or workflow logicRelevant security certifications such as CISSP, CISM, or CIAM About Us Argano is the first of its kind: a digital consultancy totally immersed in high-performance operations. We steward enterprises through ever-evolving markets, empowering them with transformative strategies and technologies to exceed customer expectations, unlock commercial innovation, and drive optimal efficiency and growth. Argano is an equal-opportunity employer. All applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability status.