Senior SailPoint IAM Engineer

Kelly Services; Natick (MA); On-site; USD 160,000 - 200,000; Full time

Benefits offered by this job

Medical, Dental, Vision insurance

401k + match

Generous PTO

Competitive bonus

Job summary

Kelly Services seeks a Senior SailPoint IAM Engineer to strengthen and automate enterprise identity and access management. You will implement and maintain SailPoint Identity Security Cloud (ISC), APIs, SCIM, and DevOps workflows to secure access across the organization.

You will collaborate with IT, security, compliance, and business teams to design governance, onboarding, and certification processes, while mentoring teammates and driving continuous improvements.

Qualifications

• Bachelor’s degree or higher with professional IAM experience.
• Strong enterprise IAM and IGA experience.
• Hands-on SailPoint Identity Security Cloud (ISC) expertise.
• Experience with identity lifecycle, onboarding, provisioning, and governance.
• Proven SailPoint ISC implementations in complex environments.

Responsibilities

• Design and build identity governance solutions with SailPoint ISC.
• Develop workflows for lifecycle management, access requests, and certifications.
• Create scalable onboarding/integration using APIs and SCIM.
• Collaborate with owners, IT, security, and compliance for governance.
• Design RBAC/ABAC and enforce least privilege policies.
• Apply CI/CD, version control, and automated testing to IAM projects.
• Improve platform reliability with automation and monitoring.
• Troubleshoot IAM issues and support audits.
• Mentor IAM team members and provide technical guidance.
• Operate SailPoint platform including upgrades and production support.

Skills

Identity Governance

SailPoint ISC

IAM Experience

DevOps Practices

APIs & SCIM

Education

Bachelor’s degree

Master’s degree

Tools

Active Directory

SQL

HR systems

ITSM platforms

REST APIs

LDAP

Job description

$160000 - $200000

A leading technology organization is looking for a Senior SailPoint IAM Engineer to help strengthen and improve its enterprise identity and access management program. This role focuses on building and maintaining identity governance solutions using SailPoint Identity Security Cloud (ISC), APIs, SCIM, and modern DevOps practices.

This is an opportunity for an experienced IAM professional who enjoys solving complex technical challenges, building scalable solutions, and making identity management more efficient and secure. You’ll help shape how employees gain access to the systems and applications they need, from onboarding and provisioning to access requests, certifications, and ongoing governance.

You’ll work closely with application owners, IT, security, compliance, and business teams to develop reliable integrations, automate processes, and establish consistent access controls across the organization. The role also offers opportunities to take technical ownership, troubleshoot complex issues, mentor other team members, and continuously improve the SailPoint platform.

Required Skills & Experience

• Bachelor’s degree with 6 years of professional experience, a master’s degree with 3 years of professional experience, a PhD, or equivalent practical experience.
• Strong experience in enterprise identity and access management, particularly Identity Governance and Administration (IGA).
• Hands-on expertise with SailPoint Identity Security Cloud (ISC).
• Experience with identity lifecycle management, application and source onboarding, access requests, provisioning, access certifications, workflows, and governance policies.
• Proven experience implementing and delivering SailPoint ISC solutions in complex enterprise environments.

Desired Skills & Experience

• Experience designing identity architectures and managing identity lifecycles, governance, provisioning, and integrations.
• Familiarity with integrating HR systems, directories, IT service management platforms, and business applications.
• Knowledge of access control models, including role-based access control (RBAC), attribute-based access control (ABAC), birthright access, segregation of duties, and least privilege.
• Experience applying DevOps practices to IAM, including source control, CI/CD pipelines, automated testing, and controlled deployments.
• Understanding of identity data management, identity correlation, entitlement modeling, and policy enforcement.
• Experience with IAM automation, API-based integrations, and scripting.
• Familiarity with SAML, OAuth, OpenID Connect (OIDC), SCIM, LDAP, SQL, REST APIs, and Active Directory.

What You’ll Be Doing

• Design, build, and enhance identity governance solutions using SailPoint ISC.
• Develop and maintain workflows for identity lifecycle management, access requests, provisioning, certifications, and governance.
• Create scalable approaches for application onboarding and integration using APIs, SCIM, and modern identity standards.
• Partner with application owners and business, IT, security, and compliance teams to onboard applications and establish consistent governance practices.
• Design access control models that balance business needs with security requirements and least-privilege principles.
• Apply sound engineering practices to platform development and delivery, including CI/CD, version control, automated testing, and release management.
• Improve platform reliability through automation, monitoring, logging, configuration management, and environment separation.
• Investigate and resolve complex identity and access issues while supporting audits and compliance requirements.
• Provide technical guidance and mentorship to other IAM team members.
• Support the ongoing operation of the SailPoint platform, including incident resolution, production support, upgrades, and continuous improvement.

Technology Breakdown

The role centers on SailPoint ISC and the technologies used to connect identity governance with enterprise systems.

• Identity Governance: SailPoint Identity Security Cloud (ISC)
• Integration Technologies: APIs, SCIM, REST
• Identity Standards: SAML, OAuth, OIDC, LDAP
• Directories & Enterprise Systems: Active Directory, SQL, HR systems, ITSM platforms
• Engineering & Automation: CI/CD, source control, automated testing, configuration management, scripting

Day-to-Day Responsibilities

The exact time allocation across responsibilities has not been specified, but the role combines hands-on engineering with technical leadership and cross-functional collaboration.

• Hands-on SailPoint Engineering: Building, configuring, integrating, and improving identity governance solutions.
• Technical Leadership: Troubleshooting complex issues, establishing engineering best practices, and mentoring IAM colleagues.
• Stakeholder Collaboration: Working with application owners, IT, security, compliance, and business teams to deliver secure, effective access management.
• Platform Operations: Supporting production environments, improving reliability, and driving ongoing automation and operational improvements.

The Offer

• Medical, Dental, Vision insurance
• Competitive base pay plus bonus
• Generous PTO
• 401k plus match

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.