Principal IAM Engineer with SailPoint / Cybersecurity

The IAM engineer is responsible for designing, implementing, and operating enterprise Identity Governance & Administration (IGA) solutions across complex hybrid environments. The role emphasizes automation-first delivery, deep knowledge of identity lifecycle management, and the ability to extend identity governance capabilities across systems while improving security posture and efficiency.

Responsibilities:

• Design, implement, and operate enterprise Identity Governance & Administration (IGA) solutions across complex hybrid environments.
• Develop and maintain SailPoint IdentityIQ and/or Identity Security Cloud solutions, including configurations, workflows, policies, rules, certifications, and lifecycle processes.
• Design and automate identity lifecycle management processes, including joiner, mover, leaver, provisioning, deprovisioning, and access changes.
• Build and maintain integrations between IAM/IGA platforms and Active Directory, HR systems, ERP platforms, databases, cloud platforms, and enterprise applications.
• Develop scalable and reusable automation and orchestration capabilities to reduce manual IAM processes and improve operational efficiency.
• Configure and manage access governance, role-based access control (RBAC), role modeling, access certifications, and Segregation of Duties (SoD) controls.
• Support IAM capabilities across Azure, AWS, GCP, and hybrid cloud environments.
• Troubleshoot complex IAM issues, perform root-cause analysis, and implement sustainable remediation.
• Monitor IAM processes and integrations to ensure availability, data quality, security, and compliance.
• Contribute to IAM architecture decisions, technical standards, solution design, and continuous improvement initiatives.
• Assess existing identity processes and identify opportunities to improve security posture, automation, scalability, and user experience.
• Ensure IGA solutions align with security policies, regulatory requirements, audit controls, and enterprise governance standards.
• Collaborate with Cybersecurity, Infrastructure, Cloud, HR, Application, and Business teams to deliver integrated identity solutions.
• Provide technical guidance and recommendations to senior stakeholders on IAM risks, governance strategies, architectural decisions, and remediation approaches.
• Support IAM audits and compliance activities by maintaining appropriate controls, documentation, evidence, and reporting.
• Stay current with SailPoint capabilities, IAM technologies, cloud security, and industry best practices, and identify opportunities to enhance the organization’s IGA maturity.

Requirements:

Must-have

• 6–10+ years in IAM, Identity Governance, Security Engineering, or Security Architecture.

• Strong SailPoint IdentityIQ and/or Identity Security Cloud implementation experience.

• Enterprise / regulated-environment experience.

• Strong knowledge of: Identity lifecycle management, Provisioning/deprovisioning, Access governance, Role modeling, Segregation of Duties (SoD), Compliance and audit controls

• Hands-on IAM integrations with: Active Directory / LDAP, HR systems , ERP systems, Databases, Enterprise applications, Cloud platforms

• Experience with IAM in Azure, AWS and/or GCP.

• Ability to work at an architectural and advisory level, not only as an implementation/support engineer.

Strongly preferred:

• SailPoint IdentityIQ Engineer Certification
• SailPoint IdentityIQ Architect Certification
• SailPoint Identity Security Cloud Professional
• SailPoint Identity Security Cloud Engineer
• Experience advising senior stakeholders on IAM architecture, governance, risks and remediation.

Ideal candidate profile

The ideal person is a Senior SailPoint IAM Engineer/Architect who has both hands-on IdentityIQ/ISC implementation experience and strong IAM architecture/governance knowledge. They should be comfortable designing identity solutions, integrating SailPoint with complex enterprise environments, and advising stakeholders on security and compliance.