Identity & Access Management Engineer I

Role Overview

This position involves supporting, enhancing, and leading the design, implementation, and ongoing operation of the Identity Governance and Administration (IGA) program. The role supports application onboarding, workflow configuration, identity lifecycle management, and the reliability of IGA systems to ensure effective access governance. The position contributes to protecting the confidentiality, integrity, and availability of organizational data by implementing and maintaining controls for access provisioning, deprovisioning, certification, and access reviews. As proficiency increases, the IAM Engineer assumes greater accountability for solution architecture, technical leadership, and strategic advancement of the IAM program.

Responsibilities

• Support SailPoint Identity Security through configuration, maintenance, and application onboarding, including connector configuration and testing.
• Assist in implementing identity lifecycle processes, including joiner, mover, and leaver events.
• Support RBAC models, access certifications, and separation-of-duty configurations to ensure effective access governance.
• Execute access provisioning, deprovisioning, and role changes according to defined standards.
• Perform integrations with on-prem and cloud directories and supported cloud platforms.
• Assist with reporting, metrics, and audit evidence collection for access reviews and compliance activities.
• Contribute to IAM automation efforts using PowerShell, Python, SQL, RPA, or Power Automate.
• Troubleshoot access and integration issues with support from senior engineers.
• Develop foundational knowledge of IAM architecture, standards, and compliance requirements.
• Configure, integrate, and tailor IAM solutions to align business needs with identity creation, deletion, vaulting, and password management standards.

Requirements

• Bachelor's Degree or equivalent combination of education and experience.
• 2 years of experience supporting IAM or IGA solutions with SailPoint.
• Working knowledge of SailPoint Identity Security, including application onboarding and configuration.
• Understanding of identity lifecycle management and access governance concepts.
• Ability to build workflows, RBAC models, and support user access lifecycle management.
• Exposure to Java, REST APIs, and scripting or automation tools.
• Familiarity with Active Directory and Entra ID.
• Experience integrating systems via APIs, including building custom integrations.
• Ability to debug complex issues, analyze logs, and resolve production incidents efficiently.
• Strong communication skills with the ability to explain technical concepts clearly.
• Experience connecting "disconnected" or legacy applications to identity platforms using JSON, CSV parsing, or automated UI interaction techniques.
• Strong analytical and problem-solving skills with the ability to exercise sound judgment in high-pressure situations while managing competing priorities and deadlines.

Preferred Qualifications

• SailPoint Certified Identity Security Engineer.
• CIMP (Certified Identity Management Professional).

Physical Requirements

Must be able to sit for long periods of time and use computer keyboard and/or mouse requiring hand and wrist manipulation, while viewing computer screens.