SailPoint Engineer (IIQ/ISC) - (Remote in the US)

Role overview A hands-on implementation engineering role focused on designing, building, and deploying identity governance solutions on the SailPoint platform, including IdentityIQ and Identity Security Cloud. The position combines deep technical configuration work with meaningful client interaction, supporting organizations in standing up lifecycle management, access certifications, and provisioning programs. It's part of a small, collaborative team where individual contributions directly shape delivery outcomes.

Responsibilities - Implement and configure SailPoint IIQ and Identity Security Cloud solutions, covering identity lifecycle management, access certifications, access requests, provisioning, and password management. - Build and maintain application onboarding work, including connectors, aggregation, correlation, and account and entitlement mapping. - Develop rules, workflows, forms, and transforms using BeanShell or Java for IIQ, and transforms, rules, and workflows for Identity Security Cloud. - Plan and execute migrations from IIQ to Identity Security Cloud, including assessment, gap analysis, and cutover planning. - Integrate SailPoint with source systems such as Active Directory, Entra ID, Okta, Workday, SuccessFactors, ServiceNow, SAP, databases, and SaaS applications. - Document technical designs, configurations, test plans, and runbooks, and support UAT, deployment, and hypercare phases.

Requirements - 5+ years of hands-on experience implementing SailPoint IdentityIQ and/or Identity Security Cloud, with working knowledge of both platforms and depth in at least one. - Solid grasp of IAM and IGA concepts, including joiner-mover-leaver processes, RBAC, role mining, separation of duties, certifications, and least privilege. - Development experience with Java, BeanShell, and XML artifacts for IIQ, or transforms, rules, REST APIs, and virtual appliance management for ISC. - Familiarity with connectors and integration patterns such as LDAP, AD, JDBC, delimited file, web services, REST, and SCIM, plus solid SQL and scripting skills. - Strong written and verbal communication with the ability to explain technical concepts to non-technical audiences, and comfort working independently in a remote, distributed team.

Nice to have - Consulting or professional services experience with client-facing delivery, scoping, and managing multiple engagements. - SailPoint certifications such as IdentityIQ Engineer or Identity Security Cloud Engineer. - Background in Git, CI/CD, and configuration management tooling, or adjacent identity technologies such as PAM, SSO, and MFA. - Experience in regulated industries including financial services, healthcare, or government.

Benefits and work setup - Remote-first position within the United States with up to 10% travel. - Group medical plan options with the majority of premiums covered, dental coverage, HSA contributions, and pet benefit options. - Twelve corporate holidays, flexible time off, mobile phone and home internet allowance, and retirement plan eligibility.