SailPoint IIQ L3 Support Engineer

Veriipro; Denver (CO); On-site; USD 120,000 - 160,000; Full time

Job summary

Veriipro is seeking an experienced SailPoint IdentityIQ (IIQ) Engineer to provide L2/L3 production support, development, customization, and maintenance of enterprise IAM solutions. The role requires hands-on work with onboarding, RBAC, JML, and SoD controls, plus strong integration experience with AD/Entra ID, LDAP, JDBC, REST/SOAP, and ServiceNow.

The ideal candidate will manage end-to-end onboarding, workflow customization, policy creation, and production issue resolution while collaborating

Qualifications

• 8+ years of experience in Identity and Access Management (IAM)
• Minimum 5+ years of hands-on experience with SailPoint IdentityIQ (IIQ)
• Strong experience in L2/L3 production support, development, customization, and administration of SailPoint IIQ
• Expertise in BeanShell, Java, XML, workflows, rules, forms, and lifecycle events
• Proven experience with end-to-end application onboarding and connector configuration
• Strong understanding of identity aggregation, correlation, entitlement management, provisioning, and deprovisioning
• Hands-on experience with JML, LCM, access certifications, and RBAC
• Experience integrating SailPoint IIQ with Active Directory, Azure AD / Entra ID, LDAP, JDBC, REST APIs, SOAP, and ServiceNow
• Strong Oracle Database and SQL knowledge, including query analysis, locking, and performance troubleshooting
• Experience with Linux log analysis and application server environments such as Tomcat and WebLogic
• Familiarity with Quartz Scheduler, IIQ Console, Debug Page, environment migration, patching, and upgrades
• Understanding of ITIL incident, problem, and change management processes
• Excellent troubleshooting, analytical, documentation, and communication skills

Responsibilities

• Provide L2/L3 production support for SailPoint IdentityIQ, resolving complex incidents and service requests
• Develop, customize, and maintain IIQ workflows, BeanShell rules, forms, lifecycle events, policies, and reports
• Lead end-to-end application onboarding, including connector configuration, schema mapping, account correlation, aggregation, provisioning policies, testing, and deployment
• Configure and support identity aggregation, entitlement management, automated provisioning, deprovisioning, and RBAC
• Manage Joiner-Mover-Leaver (JML) processes, access requests, approvals, and Lifecycle Manager (LCM) functionalities
• Support access certification campaigns, periodic access reviews, SoD controls, and audit compliance
• Troubleshoot integration issues involving AD, Azure AD/Entra ID, LDAP, JDBC, REST, SOAP, and ServiceNow
• Perform root cause analysis for provisioning failures, aggregation issues, and production incidents
• Monitor and optimize IIQ platform performance, including DB ops, logs, and scheduled tasks
• Support SailPoint IIQ upgrades, patching, environment promotions, and platform enhancements
• Collaborate with application, infra, security, and business teams to ensure IAM operations
• Maintain technical documentation and ITIL processes, mentor junior team members

Skills

SailPoint IIQ

IAM expertise

Troubleshooting

Java/XML

Onboarding workflows

RBAC provisioning

Unix/Linux

SQL/Oracle DB

Tools

BeanShell

Tomcat

WebLogic

Oracle DB

SQL

Quartz Scheduler

IIQ Console

Debug Page

JDBC

ServiceNow

LDAP

REST APIs

SOAP

Job description

Job Overview

We are seeking an experienced SailPoint IdentityIQ (IIQ) Engineer to provide L2/L3 production support, development, customization, and maintenance of enterprise Identity and Access Management (IAM) solutions.

The ideal candidate will have strong hands-on experience with SailPoint IdentityIQ, application onboarding, identity lifecycle management, access provisioning, workflow customization, and production issue resolution. This role requires expertise in troubleshooting complex IAM issues, platform administration, integrations, and ensuring the stability and security of enterprise identity management environments.

Roles and Responsibilities

• Provide L2/L3 production support for SailPoint IdentityIQ, resolving complex incidents, service requests, and platform issues.
• Develop, customize, and maintain IIQ workflows, BeanShell rules, forms, lifecycle events, policies, and reports.
• Lead end-to-end application onboarding, including connector configuration, schema mapping, account correlation, aggregation, provisioning policies, testing, and production deployment.
• Configure and support identity aggregation, entitlement management, automated provisioning, deprovisioning, and Role-Based Access Control (RBAC).
• Manage Joiner-Mover-Leaver (JML) processes, access requests, approvals, and Lifecycle Manager (LCM) functionalities.
• Support access certification campaigns, periodic access reviews, Segregation of Duties (SoD) controls, and audit compliance.
• Troubleshoot integration issues involving Active Directory, Azure AD / Entra ID, LDAP, JDBC, REST APIs, SOAP services, and ServiceNow.
• Perform root cause analysis for provisioning failures, aggregation issues, and complex production incidents.
• Monitor and optimize IIQ platform performance, including database operations, application logs, and scheduled tasks.
• Support SailPoint IIQ upgrades, patching, environment promotions, and platform enhancements.
• Work closely with application, infrastructure, security, and business teams to ensure effective IAM operations.
• Maintain technical documentation, support ITIL processes, and mentor junior team members.

Required Qualifications

• 8+ years of experience in Identity and Access Management (IAM).
• Minimum 5+ years of hands-on experience with SailPoint IdentityIQ (IIQ).
• Strong experience in L2/L3 production support, development, customization, and administration of SailPoint IIQ.
• Expertise in BeanShell, Java, XML, workflows, rules, forms, and lifecycle events.
• Proven experience with end-to-end application onboarding and connector configuration.
• Strong understanding of identity aggregation, correlation, entitlement management, provisioning, and deprovisioning.
• Hands-on experience with Joiner-Mover-Leaver (JML), Lifecycle Manager (LCM), access certifications, and RBAC.
• Experience integrating SailPoint IIQ with Active Directory, Azure AD / Entra ID, LDAP, JDBC, REST APIs, SOAP, and ServiceNow.
• Strong Oracle Database and SQL knowledge, including query analysis, locking, and performance troubleshooting.
• Experience with Linux log analysis and application server environments such as Tomcat and WebLogic.
• Familiarity with Quartz Scheduler, IIQ Console, Debug Page, environment migration, patching, and upgrades.
• Understanding of ITIL incident, problem, and change management processes.
• Excellent troubleshooting, analytical, documentation, and communication skills.

Experience Requirements

• 8+ years of overall IAM experience.
• 5+ years of hands-on SailPoint IdentityIQ experience.
• Strong background in enterprise IAM production support and application onboarding.
• Experience handling critical production issues, root cause analysis, and platform performance optimization.
• Ability to independently manage technical deliverables and provide guidance to junior engineers.