Senior IAM Engineer

Jobtailor

California (MO)

On-site

USD 120,000 - 190,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Jobtailor is seeking an experienced IAM Engineer to lead the design, development, and optimization of SailPoint IdentityIQ (IIQ) integrations with Entra ID, AD, ServiceNow, Exchange, and Workday. You will architect secure, scalable IAM solutions and drive RBAC and JML workflows to reduce risk.

The ideal candidate has 3+ years in IIQ development, strong Java, XML/Beanshell skills, and hands-on experience with REST/SOAP, SAML, and SCIM.

Qualifications

3+ years hands-on SailPoint IdentityIQ development with Java
Experience designing, deploying, and optimizing IAM solutions
Integrates SailPoint IIQ with enterprise systems (Entra ID, AD, ServiceNow, Exchange, Workday)
Knowledge of JML, RBAC, access governance, REST/SOAP, SAML, SCIM
DevOps/CI-CD experience and security certifications preferred

Responsibilities

Lead design, development, and optimization of SailPoint IIQ integrations
Architect secure, scalable IAM solutions aligned with regulations
Develop and maintain IAM processes, RBAC, and certification workflows
Manage full lifecycle of IAM systems including tuning and deployment
Collaborate with Engineering, Compliance, IT, HR to troubleshoot and synchronize data
Participate in code reviews, maintain documentation, drive continuous improvement

Skills

SailPoint IdentityIQ (IIQ)

Java

XML

Beanshell

REST APIs

SOAP APIs

SAML

SCIM

DevOps

CI-CD

Tools

Entra ID

Active Directory

ServiceNow

Exchange

Workday

Jenkins

Ansible

Linux/Unix

PKI authentication

Job description

Responsibilities

Lead the design, development, and optimization of SailPoint IdentityIQ (IIQ), including custom workflows, rules, connectors, JML lifecycle logic, and integrations with systems such as Entra ID, Active Directory, Workday, ServiceNow, and Exchange.
Contribute to and help execute MGMRI’s enterprise IAM strategy by architecting secure, scalable solutions that align with business and regulatory requirements.
Build and maintain IAM processes, policies, standards, and RBAC/certification workflows to support security best practices and reduce organizational risk.
Manage the full lifecycle of IAM systems—architecting, developing, testing, deploying, monitoring, and tuning SailPoint environments and related integrations.
Collaborate with cross-functional partners (Engineering, Compliance, IT, HR) to troubleshoot issues, improve data synchronization, and support seamless provisioning/deprovisioning across the identity ecosystem.
Serve as a key IAM technical expert by participating in code reviews, maintaining documentation, and driving continuous improvement initiatives across the program.

Requirements

3+ years of hands‑on SailPoint IdentityIQ (IIQ) development experience, including advanced rule, workflow, connector, and XML/Beanshell customization, along with strong Java programming skills.
Demonstrated experience designing, building, deploying, and optimizing IAM and software solutions, with additional preference for 4–5+ years of broader software engineering or IAM domain expertise.
Proven ability to integrate SailPoint IIQ with enterprise systems such as Entra ID, Active Directory, ServiceNow, Exchange, and Workday, and to troubleshoot, debug, and performance‑tune complex IAM environments.
Solid understanding of identity lifecycle management (JML), RBAC, access governance, and common IAM standards and protocols including REST/SOAP APIs, SAML, and SCIM.
Familiarity with leading IAM tools (e.g., SailPoint, BeyondTrust, Ping Identity, Okta, Azure AD), as well as supporting technologies such as Linux/Unix, PKI authentication, and Java/J2EE development (preferred).
Experience working with DevOps/CI‑CD tools such as Jenkins and Ansible, along with industry‑recognized security certifications (e.g., CISM, CISSP, CCSP) that reinforce strong security practices (preferred).

Hard Skills