Engineer, Identity and Access Management

ICE; Jacksonville (FL); On-site; USD 110,000 - 160,000; Full time

Job summary

Intercontinental Exchange, Inc. (ICE) seeks a SailPoint ISC Engineer to administer and optimize the Identity Security Cloud platform and oversee the migration from IdentityIQ. The role emphasizes precision in production environments to meet security and regulatory requirements.

You will design workflows, manage connectors, and automate identity processes while supporting audits and certifications across the enterprise. A strong background in IAM and API integrations is essential for success.

Qualifications

• Hands-on SailPoint ISC experience including admin, workflow development, and provisioning rule management.
• Strong IAM fundamentals including lifecycle management, RBAC, and access governance.
• Experience building SailPoint workflows, transforms, and provisioning rules.
• Experience owning the full SailPoint onboarding lifecycle from connector setup to certification.

Responsibilities

• Administers SailPoint ISC end-to-end including provisioning, deprovisioning, and lifecycle management across the enterprise.
• Designs, builds, and maintains workflows, transforms, rules, and integrations within the ISC platform.
• Owns connector configuration, attribute mapping, and entitlement aggregation for new applications.
• Supports IIQ-to-ISC migration activities, including application re-onboarding and cutover validation.
• Automates identity processes using SailPoint APIs, REST integrations, and scripting; identify opportunities to reduce manual identity lifecycle activities.
• Diagnoses and resolves provisioning failures, workflow errors, and connector issues from root cause through resolution.
• Manages the ServiceNow integration for access request routing, approvals, and provisioning fulfillment.
• Produces access evidence, generates reports, and supports certification campaigns for audits.
• Maintains runbooks, technical standards, and platform documentation for continuity and audit readiness.
• Performs other related duties as assigned.
• Requires rotational on‑call support.

Skills

SailPoint ISC

IAM fundamentals

Lifecycle management

API integration

Python

REST

ServiceNow integration

On‑call rotation

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

ServiceNow

SQL

Snowflake

REST APIs

Job description

Job Purpose

Intercontinental Exchange, Inc. (ICE) is a leading operator of global exchanges, clearing houses, data, and listings services. We connect businesses around the world to unique opportunities in markets that drive the global economy. We are a diverse and inclusive company that values innovation, collaboration, and excellence. ICE team members work across departments and traditional boundaries to innovate and respond to industry demand. A successful candidate will be able to multitask in a dynamic team-based environment demonstrating strong problem-solving and decision-making abilities and the highest degree of professionalism.

Overview

Intercontinental Exchange, Inc. (ICE) is a leading operator of global exchanges, clearing houses, data, and listings services. We connect businesses around the world to unique opportunities in markets that drive the global economy. We are a diverse and inclusive company that values innovation, collaboration, and excellence. ICE team members work across departments and traditional boundaries to innovate and respond to industry demand. A successful candidate will be able to multitask in a dynamic team-based environment demonstrating strong problem-solving and decision-making abilities and the highest degree of professionalism.

The SailPoint ISC Engineer is responsible for the administration, engineering, and operational health of ICE's Identity and Access Management platform. This role supports the systems governing how enterprise access is granted, changed, and revoked, helping ensure identity lifecycle events execute reliably and in accordance with ICE's security and regulatory requirements. The engineer will build and maintain workflows and integrations, onboard applications into SailPoint Identity Security Cloud (ISC), and support the ongoing migration from IdentityIQ (IIQ). This is a hands‑on role in a production‑critical environment where precision directly impacts compliance and operational continuity.

Responsibilities

• Administers SailPoint ISC end-to-end, including provisioning, deprovisioning, and lifecycle event management across the enterprise.
• Designs, builds, and maintains workflows, transforms, rules, and integrations within the ISC platform.
• Owns connector configuration, attribute mapping, and entitlement aggregation for new applications.
• Supports IIQ-to-ISC migration activities, including application re‑onboarding and cutover validation.
• Automates identity processes using SailPoint APIs, REST integrations, and scripting; identifies opportunities to reduce manual identity lifecycle activities.
• Diagnoses and resolves provisioning failures, workflow errors, and connector issues from root cause through resolution.
• Manages the ServiceNow integration for access request routing, approvals, and provisioning fulfillment.
• Produces access evidence, generates reports, and supports certification campaigns for internal and external audits.
• Maintains runbooks, technical standards, and platform documentation to support team continuity and audit readiness.
• Performs other related duties as assigned.
• Requires rotational on‑call support.

Knowledge And Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field, or an equivalent combination of education, training, and relevant work experience.
• Hands‑on SailPoint ISC experience, including platform administration, workflow development, connector configuration, and provisioning rule management. IIQ‑only experience does not satisfy this requirement.
• Strong IAM fundamentals, including joiner/mover/leaver lifecycle management, RBAC, entitlement management, provisioning, and access governance in a large enterprise environment.
• Experience building SailPoint workflows, transforms, and provisioning rules and translating business requirements into platform logic.
• Experience owning the full SailPoint application onboarding lifecycle, from connector setup through certification configuration.
• Scripting and API integration experience applied to identity automation, such as Python, BeanShell, REST, and JSON.
• Experience integrating SailPoint with ServiceNow for access request and provisioning workflows.
• Experience supporting identity‑related audit activities, including evidence generation and access certifications in a regulated environment.
• Ability to troubleshoot independently and communicate effectively with technical and non‑technical stakeholders.

Desirable Skills

• Direct experience supporting or leading an IIQ-to-ISC migration, including configuration mapping, application re‑onboarding, and production cutover.
• Exposure to Azure Active Directory, AWS IAM, or similar cloud directory services.
• Experience querying identity data for reporting and audit evidence using SQL, Snowflake, or equivalent tools.
• Background in financial services or another regulated environment with formal access governance requirements.
• Familiarity with SCIM, SAML, OAuth 2.0, and OIDC.
• SailPoint ISC or IIQ certification, CISSP, CISM, or equivalent.
• Excellent analytical, decision‑making, and problem‑solving skills.
• Ability to multitask in a fast‑paced environment with a focus on timeliness, documentation, and communication.

Intercontinental Exchange, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to legally protected characteristics.