Lead SailPoint Engineer

Blue Cross and Blue Shield of Massachusetts, Inc.; Golden Horseshoe; Hybrid; USD 160,000 - 196,000; Full time

Job summary

Join a forward-thinking organization as a SailPoint Engineer, where you'll design and implement cutting-edge identity access management solutions. This role is pivotal in enhancing IAM and IGA capabilities, driving automation, and ensuring compliance with security standards. You'll collaborate with various stakeholders, optimize configurations, and document processes to deliver high-quality solutions. With a strong focus on work-life balance and wellness, this innovative firm offers a comprehensive benefits package and values diversity in its workforce. Embrace the opportunity to grow your career in a supportive environment.

Benefits

Paid Time Off

Medical/Dental/Vision Insurance

401(k)

Well-being Benefits

Qualifications

• 5+ years in IAM or security engineering with strong SailPoint knowledge.
• Hands-on experience with IAM best practices and industry standards.

Responsibilities

• Collaborate with stakeholders to onboard applications to SailPoint.
• Configure access policies and ensure compliance with security standards.

Skills

SailPoint

IAM Engineering

RBAC

REST API

PowerShell

Java

Database Technologies

Education

Bachelor's degree in Computer Science

5+ years in IAM or security engineering

SailPoint Certified Engineer

Tools

SailPoint IdentityNow

SailPoint Identity Security Cloud

Data Integration Tools

Job description

SailPoint Engineer

The SailPoint Engineer is responsible for designing, implementing, and maintaining identity access management (IAM) and identity governance administration (IGA) solutions using SailPoint. This role includes identifying opportunities for automation, driving the implementation of solutions to create value, and enhancing IAM and IGA capabilities. Key responsibilities include application onboarding, workflow automation, and access policy configuration.

Key Responsibilities:

1. Collaborate with key stakeholders to analyze business and technical requirements to onboard applications to SailPoint
2. Configure access policies and ensure compliance with security and audit standards
3. Deliver high-quality, secure SailPoint solutions including enhancements, upgrades, and optimizations to meet evolving business and security needs
4. Perform hands-on configuration and customization of the SailPoint IdentityNow or Identity Security Cloud platform
5. Configure and integrate SailPoint IdentityNow or Identity Security Cloud with other applications, directories, and systems as required
6. Document the design, configuration, and customizations made to the SailPoint IdentityNow or Identity Security Cloud platform
7. Work closely with the IAM Architect, implementation partner, and other team members to ensure seamless delivery of the IAM solution
8. Define and enforce access control policies, including RBAC, least privilege principle, and segregation of duties (SoD)
9. Monitor system performance and optimize configurations
10. Work with application and security teams to troubleshoot provisioning, authentication, and access-related issues
11. Ensure compliance with security policies, audit requirements, and industry standards
12. Support audits by providing documentation, logs, or reporting as needed

Technical Expertise:

• In-depth knowledge of SailPoint features and functionality
• Hands-on engineering experience with IGA capabilities including application onboarding, RBAC, access request configuration, access reviews, and lifecycle events
• Understanding of IAM concepts like RBAC, SOD, and attribute-based access control
• Knowledge of data integration tools and connectors used with SailPoint
• Strong knowledge of SailPoint architecture, configurations, capabilities, and workflows
• Experience with IAM and IGA best practices and industry standards

Qualifications:

• Bachelor's degree in Computer Science, security, or a related field (or equivalent experience)
• 5+ years in IAM or security engineering
• SailPoint Certified Engineer (IdentityNow or Identity Security Cloud)
• 3+ years of hands-on technical IAM engineering experience
• 2+ years of SailPoint Identity Security Cloud or IdentityNow engineering experience
• Experience with ForgeRock/Ping Identity is a plus
• Experience with JAVA, PowerShell, REST API, BeanShell, and Database Technologies

#LI-Hybrid

Minimum Education Requirements:

High school degree or equivalent required unless otherwise noted above

Location:

Boston

Time Type:

Full time

Salary Range:

$160,290.00 - $195,910.00

The job posting range is the lowest to highest salary we believe we would pay for this role at the time of posting. The range may be modified in the future. An employee's pay within this range will be based on relevant education, qualifications, certifications, experience, skills, performance, shift, travel, and organizational needs. This job is also eligible for variable pay.

Benefits:

We offer a comprehensive package including paid time off, medical/dental/vision insurance, 401(k), and well-being benefits.

Why Blue Cross Blue Shield of MA?

We encourage diverse candidates to apply and bring their true colors, perspectives, and experiences. We are committed to an inclusive workplace and supporting your career development. Learn more about our culture and opportunities on our website. Join our Talent Community to stay informed. We value work/life balance and wellness.