Senior Identity Governance Engineer (SailPoint ISC)

Brunswick Corporation; Milwaukee (WI); Hybrid; USD 103,000 - 144,000; Full time

Job summary

Brunswick Corporation in Milwaukee is seeking an IAM professional to own the SailPoint Identity Security Cloud implementation end‑to‑end, including identity lifecycle, onboarding, nonemployee governance, certifications, SoD rules, and data access controls. You will translate business, security, and audit needs into scalable solutions, driving issues to closure.

Required are 7+ years in IAM, 4+ years with SailPoint ISC, and strong REST/SCIM experience.

Qualifications

• 7+ years in IAM, identity governance, or access management.
• 4+ years hands-on SailPoint experience, including SailPoint ISC.
• Experience with SailPoint NERM or similar governance platforms.
• Deep knowledge of SailPoint ISC sources, profiles, lifecycle states, roles, and workflows.
• Strong understanding of SoD, risk-based reviews, and remediation.
• Experience integrating SailPoint with HR systems, AD/Entra ID, Okta, ServiceNow, SaaS, databases, REST APIs, SCIM, JDBC, and flat files.
• Working knowledge of REST, JSON, OAuth 2.0, SCIM, SQL, PowerShell, JavaScript, Java, Git, and secure integration patterns.
• Excellent communication, ownership, urgency, and ability to drive issues to closure.

Responsibilities

• Configure and support SailPoint ISC identity profiles, sources, and lifecycle states.
• Lead employee, contractor, and nonemployee lifecycle processes (joiner, leaver, etc.).
• Lead application onboarding from discovery through production and handoff.
• Develop integrations using connectors, REST APIs, SCIM, JDBC, and webhooks.
• Design and maintain SoD rules, risk models, and remediation processes.
• Support data governance use cases (NERM, DSPM, DLP, privacy).
• Troubleshoot identity processing, provisioning, and data quality issues.
• Review designs, maintain runbooks, and report risks and decisions.

Skills

IAM governance

SailPoint ISC

Identity lifecycle

RBAC & SoD

REST APIs

SCIM

HRIS integration

Scripting / CI

Tools

SailPoint ISC

AD / Entra ID

Okta

ServiceNow

REST / JSON

SQL

JavaScript

Job description

Are you ready for what’s next?

Come explore opportunities within Brunswick, a global marine leader committed to challenging conventions and innovating next-generation technologies that transform experiences on the water and beyond. Brunswick believes “Next Never Rests”, and we offer a variety of exciting careers and growth opportunities within united teams defining the future of marine recreation.

Location Options: Mettawa, IL or Milwaukee, WI or Fond du Lac, WI or Menomonee Falls, WI

Workplace Category: Hybrid (3 days on site is required)

Travel Required: Minimal

Direct Reports: None

Pay Range: $103,200-$144,000

Visa Sponsorship: Applicants must be currently authorized to work in the United States. This position is not eligible for employment visa sponsorship now or in the future.

Relocation: Relocation is generally not offered but may be considered on a case‑by‑case basis.

Innovation is the heart of Brunswick. See how your contributions will help transform vision into reality:

We are seeking a hands‑on SailPoint ISC Engineer to own the technical and functional delivery of SailPoint Identity Security Cloud across identity lifecycle management, application onboarding, nonemployee governance, access certifications, segregation of duties, and data access security.

This role requires strong SailPoint expertise, clear communication, and end‑to‑end ownership to translate business, audit, security, and application needs into scalable solutions while driving risks, defects, and remediation to closure.

What You Will Do

• Configure and support SailPoint ISC identity profiles, sources, lifecycle states, access profiles, roles, provisioning, certifications, workflows, transforms, forms, event triggers, and notifications.
• Build and support employee, contractor, and nonemployee lifecycle processes, including joiner, mover, leaver, rehire, conversion, leave, termination, extension, expiration, and deprovisioning.
• Lead application onboarding from discovery through production, including schemas, aggregation, correlation, provisioning, approvals, certifications, testing, documentation, and operational handoff.
• Develop integrations using native connectors, REST APIs, SCIM, JDBC, web services, flat files, webhooks, event triggers, and automation.
• Design and maintain SoD rules, conflict matrices, risk models, certifications, exceptions, mitigating controls, and remediation processes.
• Support SailPoint NERM, Data Access Security, DSPM, DLP, privacy, data catalog, and sensitive‑data governance use cases.
• Troubleshoot identity processing, aggregation, correlation, provisioning, workflows, APIs, connectors, transforms, and data‑quality issues.
• Review designs and configurations from developers and partners, maintain documentation and runbooks, and report status, risks, blockers, decisions, and escalations.

Required Qualifications

• 7+ years in IAM, identity governance, identity engineering, or access management.
• 4+ years of hands‑on SailPoint experience, including recent SailPoint ISC experience.
• Experience with SailPoint NERM or similar contractor and third‑party governance platforms.
• Deep knowledge of SailPoint ISC sources, identity profiles, lifecycle states, access profiles, roles, certifications, workflows, transforms, provisioning, and access requests.
• Strong understanding of aggregation, correlation, provisioning, reconciliation, entitlement governance, RBAC, toxic combinations, risk‑based reviews, and SoD remediation.
• Experience integrating SailPoint with HR systems, AD, Microsoft Entra ID, Okta, ServiceNow, SaaS, databases, REST APIs, SCIM, JDBC, and flat files.
• Working knowledge of REST, JSON, OAuth 2.0, SCIM, SQL, PowerShell, JavaScript, Python, Java, Git, and secure integration patterns.
• Excellent communication, ownership, urgency, follow‑through, and ability to drive complex technical issues to closure.

Preferred Qualifications

• Experience with SailPoint IIQ-to-ISC migrations.
• Familiarity with SailPoint ARM, Data Access Security, SAP or Oracle SoD, privileged access, nonhuman identities, DSPM, or SailPoint certifications.

Next is Now!

We value growth and development, recognizing that people come with a wealth of experience and talent beyond just the technical requirements of a job. If your experience is close to what you see listed here, please still consider applying.

Brunswick is an Equal Opportunity Employer and considers all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or any other characteristic protected by federal, state, or local law. Diversity of experience and skills combined with passion is key to innovation and inspiration and we encourage individuals from all backgrounds to apply. If you require accommodation during the application or interview process, please contact [e-mail] for support.

Brunswick and Workday Privacy Policies

Brunswick does not accept applications, inquiries or solicitations from unapproved staffing agencies or vendors. For help, please contact our support team at: [e-mail] or 866-278-6942.

Brunswick Corporation participates in E-Verify as part of our commitment to a lawful and transparent hiring process. For additional information click here: https://www.brunswick.com/e-verify.