SailPoint IdentityIQ L3 / Technical Expert

CB Smart Recruit; Durham (NC); Hybrid; USD 83,000 - 96,000; Full time

Job summary

CB Smart Recruit seeks a senior SailPoint IIQ L3/Technical Expert for a 12-month contract in Durham, NC. This on-site role requires hands-on IIQ development, platform upgrades, and L3 production support, with 2-3 days on-site per week and hybrid collaboration with IAM, cybersecurity, and IT teams.

You will design, develop, and integrate SailPoint IIQ solutions, mentor a distributed team, and drive governance and modernization initiatives across the enterprise IAM program.

Qualifications

• 7+ years of hands-on SailPoint IdentityIQ development and IAM/Identity Governance experience.
• Deep understanding of SailPoint IIQ architecture and object model.
• Strong hands-on experience with Java APIs, workflows, rules, provisioning, and certifications.
• Experience leading major IIQ upgrades, impact assessments, and post-upgrade validation.
• Integration experience with REST/SOAP, SCIM, LDAP, HR systems, ServiceNow, SAP, and AD/Entra ID.

Responsibilities

• Design, configure, customize, and maintain SailPoint IdentityIQ solutions.
• Lead integrations between SailPoint and enterprise platforms (AD/Entra ID, HR, ServiceNow, SAP).
• Lead platform upgrades, patches, migrations, and modernization efforts.
• Own complex L3 SailPoint production issues and perform root-cause analysis.
• Provide technical leadership, code reviews, and documentation for distributed teams.
• Ensure IAM solutions align with enterprise standards and governance.
• Mentor developers and drive adoption of secure, scalable IAM architecture.

Skills

SailPoint IdentityIQ

IAM/Identity Governance

Java/J2EE

L3 production support

REST/SOAP

Education

Bachelor's degree in CS/IT/Engineering

Tools

Git

CI/CD

JVM debugging

Linux

Job description

Durham, NC | Hybrid - 2-3 Days On-Site per Week
12-Month Contract | Possible Extension
$60-70 USD/Hour | C2C or 1099
Target Start: First or Second Week of October

About the Role

We are seeking a senior SailPoint IdentityIQ (IIQ) L3 / Technical Expert to provide hands-on engineering expertise and technical leadership across a complex enterprise Identity & Access Management (IAM) environment.

This is a highly technical position combining SailPoint IIQ development, integrations, platform upgrades, L3 production support, troubleshooting, and technical governance. You will also provide guidance to a distributed development team while working closely with architecture, cybersecurity, infrastructure, HR, ITSM, product, and application teams.

The successful consultant will be capable of translating business and security requirements into scalable IAM solutions while maintaining platform stability, security, performance, and long-term maintainability.

This position requires being on-site in Durham, North Carolina 2-3 days per week.

What You'll Do

SailPoint IIQ Engineering

• Design, configure, customize, and maintain SailPoint IdentityIQ solutions.
• Develop and support workflows, rules, lifecycle events, provisioning, certifications, policies, connectors, and Java/API-based extensions.
• Build scalable solutions supporting identity lifecycle management, access requests, role management, aggregation, and governance.
• Troubleshoot and optimize complex IIQ configurations and customizations.

Integrations

Build and support integrations between SailPoint and enterprise platforms, including:

• Active Directory / Microsoft Entra ID
• HR systems
• ServiceNow
• SAP
• Security platforms
• Databases and enterprise applications

Work across integration technologies including REST, SOAP, SCIM, JDBC, LDAP, file-based, and event-driven patterns.

Platform Upgrades & Modernization

• Lead major SailPoint IIQ upgrades, patches, and migrations.
• Conduct customization and connector impact assessments.
• Develop remediation, regression testing, cutover, and rollback strategies.
• Perform post-upgrade performance and stability validation.
• Support the organization's adoption of SailPoint Identity Security Cloud / IdentityNow capabilities and IIQ-to-cloud modernization initiatives.

L3 Production Support

• Own complex L3 SailPoint production issues and escalations.
• Perform detailed root-cause analysis.
• Troubleshoot application, integration, JVM, and performance issues.
• Improve platform monitoring and automated testing.
• Identify and eliminate recurring incidents and manual processes.

Technical Leadership

• Provide technical direction to distributed SailPoint developers.
• Review solution designs and code.
• Establish reusable engineering and development standards.
• Estimate technical work and identify implementation risks.
• Mentor developers and strengthen overall team capability.
• Maintain appropriate technical documentation.

Architecture & Governance

• Ensure solutions align with enterprise IAM, cybersecurity, data protection, development, and architecture standards.
• Identify and reduce technical debt.
• Promote secure, maintainable, and scalable IAM architecture.
• Identify opportunities for automation and improved user experience.

Required Experience

• 7+ years of hands-on SailPoint IdentityIQ development and IAM/Identity Governance experience, including complex enterprise implementations and L3 production support.
• Deep understanding of SailPoint IIQ architecture and object model.
• Strong hands-on experience with:
  • Java APIs and BeanShell
  • Workflows and rules
  • Tasks and lifecycle events
  • Identity lifecycle management
  • Provisioning and aggregation
  • Role management
  • Access requests
  • Certifications
• Proven experience leading major SailPoint IIQ upgrades, including impact assessment, customization and connector remediation, regression testing, cutover, rollback, and post-upgrade validation.
• Strong Java/J2EE, XML, JSON, JavaScript, SQL, regular expressions, API development, debugging, performance optimization, and secure coding skills.
• Integration experience with REST/SOAP, SCIM, JDBC, LDAP, Active Directory/Entra ID, HR platforms, ServiceNow, SAP, and file-based integrations.
• Working knowledge of SailPoint Identity Security Cloud / IdentityNow, cloud connectors and APIs, lifecycle processes, and IIQ-to-cloud migration concepts.
• Experience with Git, CI/CD, automated testing and deployment.
• Knowledge of Linux/Unix, application servers, JVM troubleshooting, certificates, monitoring, high availability, and disaster recovery.
• Ability to operate autonomously, lead across distributed/global teams, mentor developers, and communicate effectively with both technical and business stakeholders.

Education & Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline, or equivalent professional experience.
• SailPoint IdentityIQ or Identity Security Cloud certification is preferred.
• IAM, cybersecurity, ITIL, or cloud certifications are considered an asset.
• Experience working within regulated enterprise environments is preferred.
• Previous experience leading or mentoring globally distributed technical teams is an asset.

What Success Looks Like

Success in this role will include:

• Stable, secure, and reliable SailPoint operations with fewer recurring incidents.
• High-quality, maintainable IIQ development.
• Successful upgrades with minimal business disruption.
• Timely delivery of integrations, automation, and IAM enhancements.
• Improved automated testing and development practices.
• Stronger technical capability across the distributed team.
• Reduced technical debt and measurable progress toward a modern IAM architecture.

This opportunity is best suited for a senior, hands-on SailPoint IIQ expert who can move comfortably between development, architecture, complex troubleshooting, platform modernization, and technical leadership.