General Description

We're looking for an Implementation Engineer to design, build, and deploy identity governance solutions on the SailPoint platform, including IdentityIQ (IIQ) and/or Identity Security Cloud (ISC). This is a hands-on technical role with plenty of client interaction. You'll be part of a small, collaborative team where your work is visible and your input shapes how we deliver.

About the IGA Practice

Our team of Practice Leads, Managing Security Consultants, Architects, and Engineers focus on SailPoint IIQ/ISC, Saviynt, C1, and Lumos engagements for external clients.

Roles and Responsibilities:

• Implement and configure SailPoint IIQ and ISC solutions, including identity lifecycle management, access certifications, access requests, provisioning, and password management
• Build and maintain application onboarding: connectors, aggregation, correlation, and account/entitlement mapping
• Develop rules, workflows, forms, and transforms (BeanShell/Java for IIQ; transforms, rules, and workflows for ISC)
• Design and support IIQ-to-ISC migrations, including assessment, gap analysis, and cutover planning
• Integrate SailPoint with source systems such as Active Directory, Entra ID, Okta, HR platforms (Workday, SuccessFactors), ServiceNow, SAP, databases, and SaaS applications
• Work with client stakeholders to gather requirements, run design sessions, and translate business needs into technical designs
• Write clear technical documentation, including design documents, configuration guides, test plans, and runbooks
• Support UAT, deployment, and hypercare, and troubleshoot issues across environments
• Follow SailPoint best practices for configuration management, version control, and promotion across dev/test/prod
• Mentor junior engineers and contribute to reusable accelerators, templates, and internal knowledge

Required Experience and Education:

• 5+ years of hands-on experience implementing SailPoint IdentityIQ and/or Identity Security Cloud
• Working knowledge of both platforms, with depth in at least one
• Strong understanding of IAM/IGA concepts: joiner/mover/leaver, RBAC, role mining, SoD, certifications, and least privilege
• Experience with IIQ development (Java, BeanShell, XML artifacts) or ISC configuration (transforms, rules, REST APIs, VA management)
• Experience with connectors and integration patterns (LDAP/AD, JDBC, delimited file, web services/REST, SCIM)
• Solid SQL and scripting skills, plus familiarity with JSON, XML, and REST APIs
• Strong written and verbal communication, with the ability to explain technical concepts to non-technical audiences
• Comfortable working independently in a remote, distributed team
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education

• Consulting or professional services experience, including client-facing delivery, scoping, and managing multiple engagements
• SailPoint certifications (e.g., IdentityIQ Engineer, Identity Security Cloud Engineer)
• Experience leading or contributing to IIQ-to-ISC migrations
• Familiarity with Git, CI/CD, and SSB or similar configuration management tools
• Knowledge of adjacent identity technologies (PAM, Access Management, SSO, MFA)
• Experience in regulated industries (financial services, healthcare, government)
• Background in Java development, Linux/Windows administration, or application servers (Tomcat, WebLogic)

Travel Requirements:

• Up to 10% travel

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day