IAM SailPoint Engineer, Consultant

Releady; Denver (CO); Hybrid; USD 103,000 - 117,000; Full time

Job summary

Releady seeks an IAM SailPoint Engineer to join the Information Security team on a hands-on role focused on identity lifecycle automation, RBAC, access reviews, and governance across SailPoint and adjacent platforms.

You will own AD/IAM fluency, build scalable automation, and contribute to compliance with NIST and HIPAA in a hybrid or remote setting, with W2 eligibility and 6-month+ horizon.

Qualifications

• 7+ years in identity and access management or automation engineering.
• Broad AD/IAM fluency required before SailPoint specialization.
• SailPoint IdentityNow/ISC or similar platforms.
• Automation/scripting with PowerShell, Python, REST APIs, JSON.
• Strong communication, accountability, and ability to prioritize independently.

Responsibilities

• Active Directory Foundation: maintain broad AD/IAM fluency as prerequisite to SailPoint specialization.
• IAM Automation Engineering: design, develop, test, and maintain automation for identity lifecycle, provisioning, deprovisioning, access requests/approvals, and access reviews.
• Identity Governance Automation: build and enhance automated workflows for RBAC, access certifications, policy enforcement, exception handling, and governance reporting.
• Hands-On DevOps Ownership: set up and own CI/CD pipelines hands-on.
• Compliance & Audit Enablement: automate evidence collection, control validation, access review support, and reporting for NIST, HIPAA, and related standards.
• Operational Support & Reliability: troubleshoot IAM automation issues, production support, incident resolution, and monitoring/logging improvements.
• Documentation & Runbooks: maintain process flows, automation logic, runbooks, and support procedures.

Skills

IAM engineer

Automation

SailPoint

Active Directory

DevOps

Communication

Tools

SailPoint IdentityNow

Active Directory

Microsoft Entra ID

CyberArk

REST APIs

Python

Job description

OVERVIEW

This is a hands-on IAM SailPoint Engineer role within the Information Security team of a leading healthcare technology company. This engineer will build secure, scalable automation across the identity lifecycle, including provisioning and deprovisioning, role-based access control, access certifications, privileged access workflows, and operational controls. This seat's stack and responsibilities are anchored in SailPoint plus adjacent directory and privileged access management platforms, distinguishing it from a companion, broader multi-platform engineering role also open on the same team. The role supports the organization's flagship identity platform, which secures more than five million members and other external identities across all digital portals.

NOTE: *Must be eligible to work on W2 without sponsorship. Not eligible for C2C.

• Pay Rate: $75–$85/hr
• Duration:6-month contract-to-hire
• Location: Hybrid or Remote, however must reside in the following states: WA, OH, CA, AZ, CO, CT, FL, GA, MD, MN, NV, OR, AL, IL, VA, WI, TX, NY

RESPONSIBILITIES

•Active Directory Foundation: maintain and demonstrate broad AD/IAM fluency as a prerequisite to SailPoint specialization work

•IAM Automation Engineering: design, develop, test, and maintain automation for identity lifecycle, provisioning, deprovisioning, access requests/approvals, and access reviews

•Identity Governance Automation: build and enhance automated workflows for RBAC, access certifications, policy enforcement, exception handling, and governance reporting

•Hands-On DevOps Ownership: set up and own CI/CD pipelines directly — a working method here, not a toolset managed by an adjacent team

•Compliance & Audit Enablement: automate evidence collection, control validation, access review support, and reporting for NIST, HIPAA, and related standards

•Operational Support & Reliability: troubleshoot IAM automation issues, support production workflows, resolve incidents, improve reliability via monitoring/logging

•Documentation & Runbooks: maintain process flows, automation logic, runbooks, and support procedures

QUALIFICATIONS

•Experience: 7+ years in identity and access management or automation engineering.

•Required foundation: broad Active Directory and IAM fluency, required before SailPoint specialization is considered — no exceptions

•Platforms: SailPoint (IdentityNow/ISC assumed — confirm), Active Directory, Microsoft Entra ID, CyberArk, or similar

•Automation/Scripting: PowerShell, Python, REST APIs, JSON, Ansible, or similar, with the ability to set up and own CI/CD pipelines hands-on

•Professional skills: strong communication across levels, accountability, ownership, self-motivation, and the ability to prioritize independently — treated as hard requirements, not soft preferences

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non-merit factor. We are committed to creating a diverse and inclusive environment for all employees.