SailPoint IAM Engineer: IdentityIQ/ISC Specialist

VSG Business Solutions LLC; New York (NY); On-site; USD 130,000 - 180,000; Full time

Job summary

VSG Business Solutions LLC is seeking a SailPoint IAM Engineer to deliver hands-on engineering and architecture across IIQ, ISC, and identity lifecycle management. You will architect automation, RBAC/ABAC, and certifications while integrating with ServiceNow, AD, Entra ID, PIM, HR systems, and cloud platforms.

The role emphasizes SAML, OAuth, OIDC, MFA, Okta, and zero-trust governance within SOX/HIPAA/NIST-aligned controls. On-site participation is required for the interview process.

Qualifications

• Strong hands-on expertise with SailPoint IdentityIQ and SailPoint Identity Security Cloud, including development and administration.
• Advanced experience with IAM architecture, identity lifecycle automation, access governance, provisioning, and application onboarding.
• Development experience with BeanShell, Java, REST/SOAP APIs, and SCIM.
• Experience integrating IAM platforms with ServiceNow, Active Directory, Entra ID/Azure AD, and cloud environments.
• Strong knowledge of RBAC/ABAC, Zero Trust, least privilege, SAML, OAuth, OIDC, MFA, and identity governance.

Responsibilities

• Design, develop, administer, and modernize SailPoint IIQ and ISC solutions, including IIQ-to-ISC migration.
• Develop BeanShell rules, Java components, workflows, lifecycle events, connectors, provisioning adapters, APIs, SCIM integrations, and onboarding frameworks.
• Architect joiner/mover/leaver automation, RBAC/ABAC, role modeling, certifications, SoD controls, and entitlement management.
• Integrate SailPoint with ServiceNow, Active Directory, LDAP, Entra ID/Azure AD, PIM, HR systems, PAM platforms, and AWS/Azure/GCP.
• Engineer ServiceNow access requests, approvals, provisioning/deprovisioning, incident workflows, and change-management integrations.
• Implement authentication and federation using SAML, OAuth, OIDC, MFA, and Okta, including Citizen IAM use cases.
• Apply Zero Trust and least-privilege principles while supporting SOX, HIPAA, ISO 27001, and NIST-aligned controls.
• Support production environments through troubleshooting, patching, upgrades, performance tuning, and root-cause analysis.

Skills

SailPoint IdentityIQ

SailPoint Identity Security Cloud

IAM architecture

RBAC/ABAC

Zero Trust/least privilege

SAML/OIDC/OAuth/MFA

ServiceNow integration

Tools

BeanShell

Java

REST/SOAP APIs

SCIM

ServiceNow

Active Directory

Entra ID/Azure AD

PAM platforms

AWS/Azure/GCP

Job description

VSG Business Solutions LLC is seeking a SailPoint IAM Engineer to deliver hands-on engineering and architecture across IIQ, ISC, and identity lifecycle management. You will architect automation, RBAC/ABAC, and certifications while integrating with ServiceNow, AD, Entra ID, PIM, HR systems, and cloud platforms.

The role emphasizes SAML, OAuth, OIDC, MFA, Okta, and zero-trust governance within SOX/HIPAA/NIST-aligned controls. On-site participation is required for the interview process.