IAM SailPoint Administrator

RL Canning; Chicago (IL); On-site; USD 115,000 - 125,000; Full time

Benefits offered by this job

Short-Term Disability Insurance

AD&D and Life Insurance

401(k) with matching

Paid Time Off

Paid Holidays

Job summary

RL Canning seeks an IAM SailPoint Administrator to run day-to-day IAM and IGA operations, working across SailPoint ISC, NERM, AD, Entra ID, and HRIS. You’ll optimize provisioning, entitlements, certifications, and RBAC/ABAC models in a healthcare/regulated environment.

We value strong troubleshooting, scripting in PowerShell, API testing with Postman, and collaboration with application owners to ensure compliant identity lifecycle management. Some travel may be required.

Qualifications

• 3–5+ years of experience supporting Identity & Access Management or IGA platforms.

Responsibilities

• Administer SailPoint ISC configurations including Identity Profiles, Access Profiles, Roles, Policies, and Lifecycle events.

Skills

SailPoint Identity Security Cloud

IAM governance

RBAC/ABAC

SoD

PowerShell

Postman

Entra ID

AD/Entra ID management

Education

Bachelor's degree in IT/CS or related field

Tools

SailPoint Identity Security Cloud (ISC)

Non-Employee Risk Management (NERM)

Active Directory

Entra ID

LDAP

SCIM

SSO

MFA

HRIS

PowerShell

Postman

Cerner/Epic

Job description

We are not offering visa sponsorship or C2C for this position due to resource requirements

Who We Are

RL Canning is a global IT managed services and consultancy firm committed to enhancing the digital workplace by driving value through technology and operational excellence. Our comprehensive service portfolio, supported by an ecosystem of digital innovators, delivers industry-leading solutions tailored to each customer's unique needs. We focus on achieving better, faster results aligned with long-term strategic goals.

Job Overview

RL Canning is seeking an experienced IAM SailPoint Administrator to join our IT team. This role is responsible for the day-to-day administration, configuration, and operational support of Identity Governance & Administration (IGA) platforms, including SailPoint Identity Security Cloud (ISC) and Non-Employee Risk Management (NERM). The administrator will ensure secure, compliant, and efficient lifecycle operations by managing provisioning workflows, entitlement governance, certification campaigns, and user-access-level directory operations.

The US salary range for this full-time position is $115,000 to $125,000 annually, along with a comprehensive benefits package detailed in the “Benefits Offered” section of the job description. The salary offered within this range will be influenced by factors such as work location, job-related skills, experience, and relevant education or training. During the hiring process, your recruiter will provide more specific information about the salary range, taking these factors into account. Compensation and benefits remain in the Company's sole discretion and may be modified at the Company’s absolute discretion, consistent with applicable law, until they are paid.

In this role, you will

• Administer and maintain SailPoint ISC configurations, including Identity Profiles, Access Profiles, Roles, Policies, and Lifecycle Event triggers.
• Configure and support provisioning workflows, approval chains, and automated Joiner-Mover-Leaver (JML) lifecycle events.
• Develop and maintain SailPoint Rules for Before/After Provisioning, Aggregation, and Correlation processes.
• Maintain identity attribute mappings, correlation logic, authoritative source configurations, and overall identity data quality.
• Monitor and troubleshoot provisioning failures, connector alerts, and identity synchronization issues.
• Support connector configuration and maintenance for Active Directory, Entra ID, Epic, FreshService, HRIS, and other enterprise applications across cloud and on-prem environments.
• Assist with onboarding new applications into SailPoint, including schema review, entitlement harvesting, connector configuration, and collaboration with application owners to define entitlements, roles, and access policies.
• Validate provisioning, deprovisioning, and access governance readiness for onboarded applications, including support for testing SAML, OAuth2, OIDC, SCIM, and REST-based integrations.
• Configure and support access certification campaigns, including manager, application owner, and role-based reviews.
• Maintain RBAC/ABAC models, support role lifecycle activities, and monitor identity risks such as orphaned accounts, excessive access, and stale entitlements.
• Support audit and compliance activities—including HIPAA, SOX, PCI, and ISO 27001—through evidence collection, reporting, and remediation tracking, ensuring IAM processes align with governance, regulatory, and Zero Trust requirements.
• Manage user-access-level AD and Entra ID operations, including account provisioning/deprovisioning, group membership updates, and directory attribute maintenance.
• Support identity data flows between SailPoint, AD, Entra ID, HRIS, and downstream systems, troubleshooting user-level directory synchronization issues and access discrepancies.
• Maintain clean, accurate directory structures to support identity lifecycle operations, and monitor SailPoint system health, job schedules, queue performance, and connector throughput.
• Maintain dashboards and reporting for identity lifecycle metrics and operational KPIs, and document configurations, workflows, troubleshooting steps, and operational procedures.
• Perform other tasks as necessary to support and achieve business objectives.

For this role, you will need

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent experience.
• 3-5+ years of experience supporting Identity & Access Management or IGA platforms.
• Hands-on experience with SailPoint Identity Security Cloud and Non-Employee Risk Management (NERM).
• Strong understanding of IGA methodologies, IAM best practices, identity lifecycle management, RBAC/ABAC, SoD, and access governance.
• Experience with Active Directory user administration, Entra ID, LDAP, SCIM, SSO, MFA, and HRIS systems.
• Experience with cloud identity platforms, including Entra ID, AWS IAM, and GCP IAM.
• Strong analytical and troubleshooting skills with close attention to detail and data accuracy.
• Ability to manage multiple priorities in a fast-paced, complex environment, including unionized healthcare settings.
• Experience with PowerShell for light operational automation and scripting.
• Experience with Postman for API testing and support.
• Experience with Cerner, Epic, or other EMR identity models preferred.
• Familiarity with healthcare regulatory requirements, including HIPAA and HITECH.
• Experience supporting identity operations in regulated industries such as healthcare or financial services.
• Clear, professional communication skills with the ability to explain IAM concepts to both technical and non-technical audiences.
• Collaborative mindset for cross-functional teamwork, with a commitment to secure, compliant, and efficient identity operations; SailPoint Identity Security Administrator certification preferred.
• Willingness to travel as needed to support client projects and corporate responsibilities.

Why Join Us

Cutting-Edge Innovation & Technology:

Unlock the opportunity to be a vital part of a cutting-edge environment where innovation is not just encouraged but is a way of life. You'll have the chance to work with the latest technologies, contribute to ground-breaking projects, and stay at the forefront of advancements in the IT industry.

Professional and Personal Growth:

We are dedicated to investing in our team’s growth and success. By providing the tools, resources, and support needed to enhance skills and stay ahead of industry trends, we empower our team members to unlock new opportunities for advancement. We believe that fostering individual growth strengthens careers and drives the collective success of our company.

Collaborative & Inclusive Culture:

Be part of a team where collaboration drives success. Our inclusive culture celebrates diverse perspectives and ensures every voice is heard, creating an environment where innovation and teamwork flourish. You’ll collaborate with skilled professionals from a wide range of backgrounds, exchanging ideas, tackling challenges, and crafting solutions that make a real impact. Together, we build a stronger, more dynamic workplace where collective problem-solving is at the heart of everything we do.

Empowering Work Environment:

Discover the opportunity to be an integral part of a team where your ideas are not only heard but celebrated, and your contributions have a direct impact. In this role, you’ll experience a sense of purpose as your work drives meaningful results for our projects and clients. We prioritize your growth and ensure that your potential is recognized, fostering an environment where your efforts lead to both personal fulfillment and collective success.

Benefits Offered

• Short-Term Disability Insurance
• Accidental Death & Dismemberment (AD&D) and Life Insurance
• 401(k) retirement savings plan with employer matching
• Paid Time Off
• Paid Holidays

** RL Canning is an Equal Opportunity Employer. All applicants will be considered for employment without discrimination based on race, color, religion, sex, marital status, national origin or ancestry, age, disability (physical or mental), veteran status, or any other status protected by federal, state, or local law.