Sailpoint IIQ L3 Support

Centraprise, Corp.; Denver (CO); On-site; USD 120,000 - 170,000; Full time

Job summary

Centraprise, Corp. is seeking an experienced IAM professional with deep SailPoint IIQ expertise to support and enhance our identity governance platform in Denver.

You will handle L2/L3 production support, develop workflows, rules, and forms, and lead end-to-end onboarding of applications into IIQ with connectors and provisioning policies. You will manage RBAC, JML lifecycle, LCM, SoD controls, and audit readiness, while integrating IIQ with AD/Entra ID, Azure AD, LDAP, JDBC, REST, SOAP, and

Qualifications

• 8+ years in IAM with 5+ years hands-on SailPoint IIQ in production support.
• Hands-on experience configuring workflows, rules, forms, lifecycle events, policies and reports.
• End-to-end onboarding of applications into IIQ, including connector/configuration, schema and provisioning policies.
• Strong RBAC, JML lifecycle, LCM, SoD controls and audit readiness.
• Experience with IIQ integrations to AD/Entra ID, Azure AD, LDAP, JDBC, REST, SOAP, and ServiceNow.
• Troubleshooting production issues with root cause analysis and long-term fixes.
• Ability to read and debug BeanShell/Java rules and workflow XML.
• Proficient in Oracle DB, SQL, IIQ schema, and Linux log analysis; familiar with Tomcat/WebLogic and IIQ patching/upgrades.

Responsibilities

• Provide L2/L3 production support for SailPoint IIQ environments and resolve escalations.
• Configure and optimize workflows, forms, rules, and lifecycle events within IIQ.
• Lead end-to-end onboarding of new applications into IIQ with connectors and mappings.
• Manage RBAC, entitlements, joiner-mover-leaver processes and remediation tasks.
• Support audit campaigns, SoD controls, and policy compliance activities.
• Integrate IIQ with AD/Entra ID, Azure AD, LDAP, JDBC, REST and ServiceNow.
• Troubleshoot provisioning/aggregation failures and implement long-term stability fixes.
• Capture technical documentation and mentor junior teammates.

Skills

IAM

SailPoint IIQ

L2/L3 support

Workflow development

Rules scripting

Forms development

Lifecycle events

Policy management

Reporting

Application onboarding

Connector configuration

Schema mapping

Provisioning policies

RBAC

JML lifecycle

LCM

SoD controls

Audit compliance

HCM integrations

AD/Entra ID

LDAP

JDBC

REST APIs

SOAP web services

ServiceNow

Root cause analysis

BeanShell/Java rules

Workflow XML

Oracle SQL

Linux log analysis

Tomcat/WebLogic

Quartz Scheduler

IIQ Console

Patching & Upgrades

ITIL

Documentation

Mentoring

Tools

AD/Entra ID

Azure AD

Active Directory

LDAP

REST APIs

SOAP

ServiceNow

Job description

8+ years in IAM, with 5+ years hands-on SailPoint IdentityIQ (IIQ) experience in L2/L3 production support, including development and customization of workflows, rules, forms, lifecycle events, policies, and reports.

Application onboarding experience, including end-to-end onboarding of new applications into IIQ, covering connector/application configuration, schema and account/entitlement mapping, correlation, aggregation, provisioning policies, testing/UAT, and production rollout.

Strong hands-on experience configuring and supporting account aggregation, identity correlation, entitlement management, automated provisioning/deprovisioning, and Role-Based Access Control (RBAC).

Experience with the full Joiner-Mover-Leaver (JML) lifecycle, access requests and approvals (LCM), and role and entitlement management.

Experience supporting access certification campaigns, including periodic reviews and renewals, Segregation of Duties (SoD) controls, policy compliance, and audit requirements.

Experience with HCM integrations and IIQ integrations with Active Directory, Azure AD/Entra ID, LDAP, JDBC/databases, REST APIs, SOAP web services, delimited files, and ServiceNow.

Proven ability to troubleshoot complex production issues, including provisioning and aggregation failures, perform root cause analysis, and implement long-term fixes for platform stability and performance.

Ability to read and debug BeanShell/Java rules and workflow XML.

Strong Oracle Database knowledge, including SQL, IIQ schema, locking, and performance analysis, along with Linux log analysis experience.

IIQ platform knowledge including Tomcat/WebLogic, Quartz Task Scheduler, IIQ Console, Debug Page, environment promotion, and participation in IIQ patching, upgrades, and enhancements.

Experience with ITIL incident, problem, and change management processes.

Strong technical documentation skills and experience mentoring junior team members.