Senior IAM SailPoint IdentityNow Engineer

EPAM Systems, Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare benefits

Employee financial programs

Paid time off

Upskilling & certification

LinkedIn Learning access

Global career opportunities

Volunteer opportunities

Employee groups

Award-winning culture

Job summary

EPAM Systems, Inc. seeks a Senior IAM SailPoint IdentityNow Engineer to strengthen identity governance, access controls, and compliance outcomes. You will configure IdentityNow, support access certifications, and drive role engineering to minimize access sprawl while increasing governance visibility.

You will partner with compliance teams to align processes with industry standards. You will document changes and maintain runbooks, collaborating with global teams and stakeholders across finance,

Qualifications

• Hands-on experience with SailPoint IdentityNow configuration (3+ years).
• Strong understanding of access certification, RBAC, and JML lifecycle.
• Experience documenting configurations and maintaining runbooks.
• Excellent communication with compliance and business stakeholders.

Responsibilities

• Configure and refine SailPoint IdentityNow to enable new identity governance use cases.
• Run and support access certification campaigns, improving accuracy and efficiency.
• Drive role engineering to reduce access sprawl and increase governance visibility.
• Collaborate with compliance teams to align IGA with SOX, PCI-DSS, and NIST testing.
• Document configuration updates and keep operational runbooks current.

Skills

SailPoint IdentityNow

Identity governance

Access certification

RBAC

JML lifecycle

Identity management

Tools

Jira

Confluence

Job description

We are seeking a Senior IAM SailPoint IdentityNow Engineer to strengthen identity governance, access controls, and compliance outcomes across the organization. You will configure and optimize SailPoint IdentityNow, partner with compliance and business stakeholders, and improve access certifications and role engineering to reduce risk and increase visibility.ResponsibilitiesConfigure and refine SailPoint IdentityNow to enable new identity governance use casesRun and support access certification campaigns while improving accuracy and operational efficiencyDrive role engineering activities to reduce access sprawl and increase governance visibilityCollaborate with compliance teams to align IGA processes with SOX, PCI-DSS, and NIST-aligned control testingDocument configuration updates and keep operational runbooks currentRequirementsHands-on experience with SailPoint IdentityNow (cloud IGA) configuration for 3+ years, not IdentityIQ aloneSolid understanding of identity governance practices, including access certification, role-based access control, and joiner/mover/leaver lifecyclePractical experience using Jira and Confluence to manage work and maintain technical documentationStrong communication skills for partnering with compliance and business stakeholdersNice to haveExperience working in SAFe/Agile delivery frameworksFamiliarity with BeyondTrust or another PAM platformSailPoint certificationWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedIn