SailPoint Tech Lead

Guardianlife; Holmdel Township (NJ); On-site; USD 99,000 - 163,000; Full time

Job summary

Guardian Life IAM Engineering invites you to join a team shaping identity & access management across our IT infrastructure. You will design, develop, test, implement, and support IAM solutions while aligning with risk and compliance requirements.

The role emphasizes hands-on SailPoint IIQ work, cross-functional collaboration, and proactive security process improvements. The ideal candidate will bring 5+ years of SailPoint IdentityIQ experience, strong scripting skills (Java/PowerShell/Python),

Qualifications

• 5+ years hands-on SailPoint IdentityIQ experience.
• Experience scripting in Java, JavaScript, PowerShell, BeanShell, Python, or Visual Basic.
• Experience integrating SailPoint with SaaS/PaaS and developing forms/workflows.
• Experience with various connectors: Webservice APIs, SCIM, JDBC, Delimited File, SFTP.
• SailPoint infrastructure, upgrades, performance tuning.
• Knowledge of MSSQL, MySQL, Aurora PostgreSQL, Oracle, DB2.
• Knowledge of Windows, Linux, Unix, RACF Mainframe.
• Understanding of security risk and compliance standards including SOX, SOC, MAR, NYDFS.
• Knowledge of entitlement reviews and lifecycle events (on/offboarding).
• Experience with AD, Entra ID, Okta, LDAP.
• Ability to work independently on multiple projects and communicate clearly.
• Experience with DevOps, CI/CD, and AWS.
• Experience with AI Control Plane and Non-Human Identities (NHI).
• Strong knowledge of IAM concepts, technologies, and standard processes.

Responsibilities

• Extensive hands-on experience in SailPoint IIQ LCM and connector/automation implementation.
• Serve as an SME for IAM domain.
• Design, develop, and implement IAM solutions to meet risk and compliance requirements.
• Develop and maintain technical docs, diagrams, and workflows.
• Lead IAM projects delivering automation, integrations, connectors, and dashboards.
• Communicate technical concepts to business stakeholders clearly.
• Manage priorities with cross-functional teams and vendors.
• Contribute to continuous security process engineering and operational excellence.
• Support internal and external audits and risk assessments.

Skills

SailPoint IIQ

Java

PowerShell

Python

AD/Entra ID

AWS

Okta

Azure AD

CI/CD

Documentation

Tools

Webservice APIs

SCIM

JDBC

SFTP

Job description

Are you a lifelong learner, and passionate about solving complex IAM problems? Then join our IAM Engineering team. This role will be responsible for designing, developing, testing, implementing, maintaining, and supporting identity and access management (IAM) solutions to ensure the security and efficiency of the organization's IT infrastructure. This role involves working closely with various groups to understand their IAM needs and providing expert guidance on standard methodologies and solutions.

Key Responsibilities

• Extensive hands-on experience in SailPoint IIQ LCM and connector/automation implementation.
• Serve as an SME (Subject Matter Expert) for Identity and Access Management domain.
• Design, develop, and implement technical solutions as part of our Identity and Access Management strategy to meet risk and compliance regulations.
• Develop and maintain technical documentation, technical diagrams, and visual workflows.
• Lead IAM projects by executing and delivering automation, integrations, connectors, and self-service capabilities to end users, and building dashboards/reporting.
• The ability to communicate with all levels of the organization in a comprehensive manner (i.e., translating and presenting technical information to business).
• Manage priorities, deliverables, by partnering with cross-functional teams and third-party vendors.
• Act with accountability and responsibility.
• Dedication to continuous improvement, security process engineering, and operational excellence.
• Support internal and external audits and risk assessments.

Requirements

• Hands-on Expertise (5+ years) in SailPoint IdentityIQ platform features and functionality.
• Hands-on experience in scripting/developing one of the following: Java, JavaScript, PowerShell, BeanShell, Python, Visual Basic
• Hands-on experience with integrating SailPoint with other third-party systems (SaaS/PaaS) and developing custom forms, workflows, quicklinks, reporting and enhancing entitlement reviews overall process.
• Hands-on experience with different types of connectors - Webservice APIs, SCIM, JDBC, Delimited Feed File, SFTP connectors.
• Hands-on experience with SailPoint infrastructure, upgrades, and performance tuning.
• Knowledge of all different types of databases such as MSSQL, MYSQL, Aurora RDS/EC2 Postgres, Oracle, and DB2.
• Knowledge of platforms such as Windows, Linux, Unix, and RACF Mainframe.
• Solid understanding of security risk, implementation of mitigating controls and compliance standards including SOX, SOC, MAR, and NYDFS.
• Knowledge of entitlement reviews, native changes, offboarding, onboarding, transfer, advance SOD configuration
• Knowledge of Active Directory, Entra ID, OKTA, LDAP directories.
• Experience developing and continuously improving processes, procedures, and controls.
• Proactive mindset and ability to work independently on numerous projects/activities at the same time with minimal oversight.
• Excellent customer focus is on supporting a positive customer service climate.
• Experience working closely with IT engineers to solve problems, think critically, design and implement solutions,
• Strong written and verbal communication with the ability to synthesize information.
• Experience with DevOps, CI/CD, and AWS.
• Experience with AI Control Plane, and Non-Human Identities (NHI)
• Strong knowledge of IAM concepts, technologies, and standard processes.
• Experience with AWS IAM and Identity Center
• Experience with IAM platforms, including Okta, PingFederate, SailPoint, CyberArk, and Microsoft Azure AD/Entra ID.
• Experience with reverse proxy solutions, including Okta Access Gateway and Microsoft App Proxy.
• A "lifelong learner" of new concepts and technical capabilities.
• After hours and weekend support - as needed.
• DR Support - as needed

Salary Range

$99,150.00 - $162,885.00

The salary range reflected above is a good faith estimate of base pay for the primary location of the position. The salary for this position ultimately will be determined based on the education, experience, knowledge, and abilities of the successful candidate. In addition to salary, this role may also be eligible for annual, sales, or other incentive compensation.

Our Promise

At Guardian, you'll have the support and flexibility to achieve your professional and personal goals. Through skill-building, leadership development and philanthropic opportunities, we provide opportunities to build communities and grow your career, surrounded by diverse colleagues with high ethical standards.

Inspire Well-Being

As part of Guardian's Purpose - to inspire well-being - we are committed to offering contemporary, supportive, flexible, and inclusive benefits and resources to our colleagues. Explore our company benefits at www.guardianlife.com/careers/corporate/benefits. Benefits apply to full-time eligible employees. Interns are not eligible for most Company benefits.

Equal Employment Opportunity

Guardian is an equal opportunity employer. All qualified applicants will be considered for e