Software Dev. Eng. III

About the role

The University of Utah is seeking a highly skilled and experienced IAM Engineer & SailPoint Developer to join their centralized Identity and Access Management (IAM) team. This role is crucial to the modernization and security of their campus and clinical environments.

About UIT

University Information Technology (UIT), the central IT service provider for the University of Utah, reports to the U's Chief Information Officer and is responsible for many of the U's shared IT services including the wired and wireless network; Campus Information Services (CIS) portal; UMail, telephone, and online collaboration; digital learning technologies; information security; software licensing; and a host of other IT systems and services.

Responsibilities

• Development & Implementation (50%): Custom Customization: Design and develop custom SailPoint IIQ artifacts including Workflows, Rules (BeanShell/Java), QuickLinks, Forms, and Email Templates. System Integration: Build, configure, and maintain complex SailPoint connectors for target systems including Active Directory, Azure AD/Entra ID, LDAP, HR databases (PeopleSoft), Student Information Systems (SIS), and custom REST/SOAP APIs. Role & Policy Engineering: Design and implement Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Separation of Duties (SoD) policies, and automated provisioning/deprovisioning engines. Code Management: Manage source code, packaging, and deployment pipelines using Git, Jenkins, or similar CI/CD tools, adhering to institutional change control and software development lifecycle (SDLC) best practices.

• Daily Operations & System Maintenance (30%): Operational Health: Monitor daily aggregation tasks, refresh tasks, system health, and overall performance of the SailPoint IIQ application servers (Tomcat) and database (SQL). Troubleshooting: Serve as the Tier 3 escalation point for resolving complex SailPoint runtime errors, workflow hang-ups, connectivity failures, and data mismatches. Compliance & Certifications: Support the execution, monitoring, and reporting of automated user access reviews and compliance campaigns across various institutional departments. Upgrades & Patching: Plan and execute SailPoint platform upgrades, patch applications, and system migration steps in collaboration with infrastructure and database administrators.

• Collaboration, Strategy & Documentation (20%): Requirement Gathering: Partner with business analysts, security teams, and department stakeholders to translate complex access policies into actionable SailPoint designs. Technical Leadership: Mentor junior engineers/administrators within the IAM team and champion clean, secure coding standards. Technical Documentation: Author and maintain detailed technical architecture diagrams, runbooks, build guides, and disaster recovery procedures.

Qualifications

• EQUIVALENCY STATEMENT: 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor's degree = 4 years of directly related work experience).

• Department may hire employee at one of the following job levels: Software Development Engineer, III: Requires a bachelor's (or equivalency) + 6 years or a master's (or equivalency) + 4 years of directly related work experience.

• PREFERENCES: Certifications: SailPoint Certified IdentityIQ Engineer or SailPoint Certified IdentityIQ Architect. Higher Education Experience: Familiarity with the unique IAM challenges of a research university or academic medical center (handling diverse user populations like students, researchers, clinical staff, and alumni). Modern Frontend: Experience with modern JavaScript frameworks (e.g., Angular, React) for advanced SailPoint UI customization. Containerization & DevOps: Familiarity with Docker, Kubernetes, and automated deployment architectures.