Sailpoint Iiq L3 Support

Tata Consultancy Services; Denver (CO); On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Medical Coverage: Medical & Health, &a

Parental Leaves

401K Plan

Certification & Training Reimbursement

Job summary

Tata Consultancy Services Limited in Denver, CO seeks an experienced IAM Engineer with 8+ years in identity and access management and at least 5 years hands-on SailPoint IIQ experience. You will contribute to production support, workflows, forms, and lifecycle events, and lead onboarding of new applications into IIQ.

You will configure account aggregation, RBAC, and provisioning policies, support SoD controls and audits, integrate with AD/Azure AD, LDAP, REST/SOAP, and work with ITIL processes

Qualifications

• 8+ years in IAM with 5+ years SailPoint IIQ experience.
• End-to-end onboarding of applications into IIQ and configuration of connectors.
• Experience with JML lifecycle, LCM, RBAC, and SoD controls.
• Proficient in ITIL incident, problem, and change management.
• Strong SQL/Oracle skills and Linux log analysis.
• Ability to read and debug BeanShell/Java rules and workflow XML.
• Mentor junior team members and document technical details.

Responsibilities

• Provide L2/L3 production support for IIQ environments.
• Develop and customize IIQ workflows, forms, and policies.
• Lead application onboarding, provisioning policies, and testing.
• Support integration with AD/Azure AD, LDAP, REST/SOAP, and ServiceNow.
• Troubleshoot provisioning/aggregation failures and perform root-cause analysis.

Skills

IAM expertise

SailPoint IIQ

Production support

Root cause analysis

Mentoring

Education

Bachelor of Technology

Tools

Active Directory / Azure AD

LDAP

REST APIs

SOAP

ServiceNow

Tomcat/WebLogic

Oracle SQL

Linux

Job description

• 8+ years in IAM, with 5+ years hands-on SailPoint IdentityIQ (IIQ) experience in L2/L3 production support, including development and customization of workflows, rules, forms, lifecycle events, policies, and reports.
• Application onboarding experience, including end-to-end onboarding of new applications into IIQ, covering connector/application configuration, schema and account/entitlement mapping, correlation, aggregation, provisioning policies, testing/UAT, and production rollout.
• Strong hands-on experience configuring and supporting account aggregation, identity correlation, entitlement management, automated provisioning/deprovisioning, and Role-Based Access Control (RBAC).
• Experience with the full Joiner-Mover-Leaver (JML) lifecycle, access requests and approvals (LCM), and role and entitlement management.
• Experience supporting access certification campaigns, including periodic reviews and renewals, Segregation of Duties (SoD) controls, policy compliance, and audit requirements.
• Experience with HCM integrations and IIQ integrations with Active Directory, Azure AD/Entra ID, LDAP, JDBC/databases, REST APIs, SOAP web services, delimited files, and ServiceNow.
• Proven ability to troubleshoot complex production issues, including provisioning and aggregation failures, perform root cause analysis, and implement long-term fixes for platform stability and performance.
• Ability to read and debug BeanShell/Java rules and workflow XML.
• Strong Oracle Database knowledge, including SQL, IIQ schema, locking, and performance analysis, along with Linux log analysis experience.
• IIQ platform knowledge including Tomcat/WebLogic, Quartz Task Scheduler, IIQ Console, Debug Page, environment promotion, and participation in IIQ patching, upgrades, and enhancements.
• Experience with ITIL incident, problem, and change management processes.
• Strong technical documentation skills and experience mentoring junior team members.

Salary Range: $130,000-$150,000 a year

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Location

Denver, CO

Function

TECHNOLOGY

Role

Engineer

ID

434849

Skills

IAM | Sailpoint IAM

Salary Range

$130,000 - $150,000

Desired Candidate Profile

Qualifications

BACHELOR OF TECHNOLOGY