SailPoint IdentityIQ (IIQ) L3 / Technical Expert

CB Smart Recruit; Durham (NC); Hybrid; USD 83,000 - 96,000; Full time

Job summary

CB Smart Recruit in Durham, NC is seeking a senior SailPoint IdentityIQ L3/Technical Expert on a 12-month contract. The role is hybrid, onsite 2-3 days per week, with a target start in October. You will provide hands-on IIQ development, integrations, upgrades, and production support for a complex IAM environment.

Lead a distributed team, design scalable identity governance solutions, and mentor developers while delivering secure, maintainable IAM architecture. C2C/1099 options available.

Qualifications

• 7+ years SailPoint IIQ development and IAM experience.
• Strong understanding of SailPoint IIQ architecture.
• Hands-on with Java APIs, workflows, and lifecycle events.
• Experience with provisioning, aggregation, and certifications.
• Proven leadership of distributed teams in enterprise IAM.

Responsibilities

• Design, configure, and maintain SailPoint IIQ solutions.
• Lead upgrades, patches, and migrations.
• Develop workflows, rules, and integrations (REST/SOAP/SCIM/JDBC/LDAP).
• Provide technical leadership and mentorship to developers.

Skills

SailPoint IIQ development

IAM/Identity Governance

IIQ architecture

Java APIs

Workflows and rules

Lifecycle events

Provisioning and aggregation

Role management

Access requests

Certifications

Java/J2EE

API development

Git/CI/CD

Education

Bachelors in Computer Science or related

SailPoint IdentityIQ certification (preferred)

Tools

REST

SOAP

SCIM

JDBC

LDAP

Active Directory/Entra ID

ServiceNow

SAP

Job description

Durham, NC | Hybrid - 2-3 Days On-Site per Week
12-Month Contract | Possible Extension
$60-70 USD/Hour | C2C or 1099
Target Start: First or Second Week of October

About the Role

We are seeking a senior SailPoint IdentityIQ (IIQ) L3 / Technical Expert to provide hands-on engineering expertise and technical leadership across a complex enterprise Identity & Access Management (IAM) environment.

This is a highly technical position combining SailPoint IIQ development, integrations, platform upgrades, L3 production support, troubleshooting, and technical governance. You will also provide guidance to a distributed development team while working closely with architecture, cybersecurity, infrastructure, HR, ITSM, product, and application teams.

The successful consultant will be capable of translating business and security requirements into scalable IAM solutions while maintaining platform stability, security, performance, and long-term maintainability.

This position requires being on-site in Durham, North Carolina 2-3 days per week.

What You'll Do

SailPoint IIQ Engineering

• Design, configure, customize, and maintain SailPoint IdentityIQ solutions.
• Develop and support workflows, rules, lifecycle events, provisioning, certifications, policies, connectors, and Java/API-based extensions.
• Build scalable solutions supporting identity lifecycle management, access requests, role management, aggregation, and governance.
• Troubleshoot and optimize complex IIQ configurations and customizations.

Integrations

Build and support integrations between SailPoint and enterprise platforms, including:

• Active Directory / Microsoft Entra ID
• HR systems
• ServiceNow
• SAP
• Security platforms
• Databases and enterprise applications

Work across integration technologies including REST, SOAP, SCIM, JDBC, LDAP, file-based, and event-driven patterns.

Platform Upgrades & Modernization

• Lead major SailPoint IIQ upgrades, patches, and migrations.
• Conduct customization and connector impact assessments.
• Develop remediation, regression testing, cutover, and rollback strategies.
• Perform post-upgrade performance and stability validation.
• Support the organization's adoption of SailPoint Identity Security Cloud / IdentityNow capabilities and IIQ-to-cloud modernization initiatives.

L3 Production Support

• Own complex L3 SailPoint production issues and escalations.
• Perform detailed root-cause analysis.
• Troubleshoot application, integration, JVM, and performance issues.
• Improve platform monitoring and automated testing.
• Identify and eliminate recurring incidents and manual processes.

Technical Leadership

• Provide technical direction to distributed SailPoint developers.
• Review solution designs and code.
• Establish reusable engineering and development standards.
• Estimate technical work and identify implementation risks.
• Mentor developers and strengthen overall team capability.
• Maintain appropriate technical documentation.

Architecture & Governance

• Ensure solutions align with enterprise IAM, cybersecurity, data protection, development, and architecture standards.
• Identify and reduce technical debt.
• Promote secure, maintainable, and scalable IAM architecture.
• Identify opportunities for automation and improved user experience.

Required Experience

• 7+ years of hands-on SailPoint IdentityIQ development and IAM/Identity Governance experience, including complex enterprise implementations and L3 production support.
• Deep understanding of SailPoint IIQ architecture and object model.
• Strong hands-on experience with:
  • Java APIs and BeanShell
  • Workflows and rules
  • Tasks and lifecycle events
  • Identity lifecycle management
  • Provisioning and aggregation
  • Role management
  • Access requests
  • Certifications
• Proven experience leading major SailPoint IIQ upgrades, including impact assessment, customization and connector remediation, regression testing, cutover, rollback, and post-upgrade validation.
• Strong Java/J2EE, XML, JSON, JavaScript, SQL, regular expressions, API development, debugging, performance optimization, and secure coding skills.
• Integration experience with REST/SOAP, SCIM, JDBC, LDAP, Active Directory/Entra ID, HR platforms, ServiceNow, SAP, and file-based integrations.
• Working knowledge of SailPoint Identity Security Cloud / IdentityNow, cloud connectors and APIs, lifecycle processes, and IIQ-to-cloud migration concepts.
• Experience with Git, CI/CD, automated testing and deployment.
• Knowledge of Linux/Unix, application servers, JVM troubleshooting, certificates, monitoring, high availability, and disaster recovery.
• Ability to operate autonomously, lead across distributed/global teams, mentor developers, and communicate effectively with both technical and business stakeholders.

Education & Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline, or equivalent professional experience.
• SailPoint IdentityIQ or Identity Security Cloud certification is preferred.
• IAM, cybersecurity, ITIL, or cloud certifications are considered an asset.
• Experience working within regulated enterprise environments is preferred.
• Previous experience leading or mentoring globally distributed technical teams is an asset.

What Success Looks Like

Success in this role will include:

• Stable, secure, and reliable SailPoint operations with fewer recurring incidents.
• High-quality, maintainable IIQ development.
• Successful upgrades with minimal business disruption.
• Timely delivery of integrations, automation, and IAM enhancements.
• Improved automated testing and development practices.
• Stronger technical capability across the distributed team.
• Reduced technical debt and measurable progress toward a modern IAM architecture.

This opportunity is best suited for a senior, hands-on SailPoint IIQ expert who can move comfortably between development, architecture, complex troubleshooting, platform modernization, and technical leadership.