SailPoint Engineer (IIQ/ISC) - (Remote in the US)

GuidePoint Security, LLC; United States; Remote; USD 110,000 - 180,000; Full time

Benefits offered by this job

Remote work

Health insurance

Dental insurance

Time off (FTO)

Phone & internet allowance

Retirement plan eligibility

Pet benefits

Job summary

GuidePoint Security is seeking an Implementation Engineer to design, build, and deploy identity governance solutions on the SailPoint platform, including IIQ and ISC. This hands-on role involves frequent client interaction within a small, collaborative team, shaping delivery approaches.

You will work across IIQ/ISC migrations, integrate with AD/Entra/Okta/HR systems, and craft documentation while mentoring junior engineers. Remote-friendly, with up to 10% travel in the US.

Qualifications

• 5+ years implementing SailPoint IdentityIQ and/or Identity Security Cloud.
• Experience with connectors and integration patterns (LDAP/AD, JDBC, REST, SCIM).
• Strong IAM/IGA knowledge: joiner/mover/leaver, RBAC, SoD, least privilege.
• Java/BeanShell/XML artifacts for IIQ; ISC configuration.
• Excellent written and verbal communication; explain technical concepts to non-technical audiences.
• Able to work remotely in a distributed team.
• Familiarity with AI tools is a plus.

Responsibilities

• Implement and configure SailPoint IIQ and ISC solutions, including lifecycle management, access certifications, access requests, provisioning, and password management.
• Build and maintain application onboarding: connectors, aggregation, correlation, and account/entitlement mapping.
• Develop rules, workflows, forms, and transforms (BeanShell/Java for IIQ; transforms, rules, and workflows for ISC).
• Design and support IIQ-to-ISC migrations, including assessment, gap analysis, and cutover planning.
• Integrate SailPoint with source systems such as Active Directory, Entra ID, Okta, HR platforms, ServiceNow, SAP, databases, and SaaS applications.
• Work with client stakeholders to gather requirements, run design sessions, and translate business needs into technical designs.
• Write clear technical documentation, including design documents, configuration guides, test plans, and runbooks.
• Support UAT, deployment, and hypercare, and troubleshoot issues across environments.
• Follow SailPoint best practices for configuration management, version control, and promotion across dev/test/prod.
• Mentor junior engineers and contribute to reusable accelerators, templates, and internal knowledge.

Skills

IAM/IGA concepts

Java/BeanShell/XML

REST/JSON APIs

SQL

Remote collaboration

Tools

SailPoint IIQ

Identity Security Cloud

Git

CI/CD

SSB tooling

Job description

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best‑fit solutions that mitigate risk.

General Description

We're looking for an Implementation Engineer to design, build, and deploy identity governance solutions on the SailPoint platform, including IdentityIQ (IIQ) and/or Identity Security Cloud (ISC). This is a hands-on technical role with plenty of client interaction. You'll be part of a small, collaborative team where your work is visible and your input shapes how we deliver.

About the IGA Practice

Our team of Practice Leads, Managing Security Consultants, Architects, and Engineers focus on SailPoint IIQ/ISC, Saviynt, C1, and Lumos engagements for external clients.

Roles and Responsibilities:

• Implement and configure SailPoint IIQ and ISC solutions, including identity lifecycle management, access certifications, access requests, provisioning, and password management
• Build and maintain application onboarding: connectors, aggregation, correlation, and account/entitlement mapping
• Develop rules, workflows, forms, and transforms (BeanShell/Java for IIQ; transforms, rules, and workflows for ISC)
• Design and support IIQ-to-ISC migrations, including assessment, gap analysis, and cutover planning
• Integrate SailPoint with source systems such as Active Directory, Entra ID, Okta, HR platforms (Workday, SuccessFactors), ServiceNow, SAP, databases, and SaaS applications
• Work with client stakeholders to gather requirements, run design sessions, and translate business needs into technical designs
• Write clear technical documentation, including design documents, configuration guides, test plans, and runbooks
• Support UAT, deployment, and hypercare, and troubleshoot issues across environments
• Follow SailPoint best practices for configuration management, version control, and promotion across dev/test/prod
• Mentor junior engineers and contribute to reusable accelerators, templates, and internal knowledge

Required Experience and Education:

• 5+ years of hands-on experience implementing SailPoint IdentityIQ and/or Identity Security Cloud
• Working knowledge of both platforms, with depth in at least one
• Strong understanding of IAM/IGA concepts: joiner/mover/leaver, RBAC, role mining, SoD, certifications, and least privilege
• Experience with IIQ development (Java, BeanShell, XML artifacts) or ISC configuration (transforms, rules, REST APIs, VA management)
• Experience with connectors and integration patterns (LDAP/AD, JDBC, delimited file, web services/REST, SCIM)
• Solid SQL and scripting skills, plus familiarity with JSON, XML, and REST APIs
• Strong written and verbal communication, with the ability to explain technical concepts to non-technical audiences
• Comfortable working independently in a remote, distributed team
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education

• Consulting or professional services experience, including client-facing delivery, scoping, and managing multiple engagements
• SailPoint certifications (e.g., IdentityIQ Engineer, Identity Security Cloud Engineer)
• Experience leading or contributing to IIQ-to-ISC migrations
• Familiarity with Git, CI/CD, and SSB or similar configuration management tools
• Knowledge of adjacent identity technologies (PAM, Access Management, SSO, MFA)
• Experience in regulated industries (financial services, healthcare, government)
• Background in Java development, Linux/Windows administration, or application servers (Tomcat, WebLogic)

Travel Requirements:

• Up to 10% travel

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

Why GuidePoint?

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly-defined core values drive all aspects of the business, which have been paramount to the company's success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.

Some added perks....

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option