Senior SailPoint IAM Engineer

Motion Recruitment; Natick (MA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental, Vision insurance

Competitive base pay plus bonus

Generous PTO

401k with match

Job summary

Motion Recruitment is seeking a Senior SailPoint IAM Engineer in Massachusetts to strengthen an enterprise IAM program. You will design, build, and maintain identity governance using SailPoint ISC, APIs, SCIM, and modern DevOps practices.

You will work with IT and business teams to onboard applications, automate provisioning, run certifications, and enforce governance policies across the organization.

Qualifications

• Bachelor’s degree with 6 years of professional experience or equivalent
• Strong experience in enterprise IAM, especially IGA
• Hands-on SailPoint Identity Security Cloud (ISC) expertise
• Experience with identity lifecycle management, provisioning, access requests, certifications
• Proven track record delivering SailPoint ISC solutions in complex enterprises

Responsibilities

• Design, build, and enhance identity governance solutions using SailPoint ISC
• Develop workflows for identity lifecycle management, access requests, provisioning, and governance
• Create scalable application onboarding and integration using APIs and SCIM
• Collaborate with owners, IT, security, and compliance to establish governance
• Design access control models balancing business needs with least privilege
• Apply CI/CD, version control, automated testing, and release management
• Improve platform reliability through automation, monitoring, and configuration management
• Investigate and resolve complex IAM issues and support audits
• Provide mentorship to IAM team members
• Operate SailPoint platform including upgrades and production support

Skills

Identity Governance

SailPoint ISC

Identity Lifecycle

APIs & SCIM

CI/CD DevOps

Onboarding & Provisioning

Access Certifications

RBAC & ABAC

Education

Bachelor's degree

Master's degree

PhD

Job description

A leading technology organization is looking for a Senior SailPoint IAM Engineer to help strengthen and improve its enterprise identity and access management program. This role focuses on building and maintaining identity governance solutions using SailPoint Identity Security Cloud (ISC), APIs, SCIM, and modern DevOps practices.

This is an opportunity for an experienced IAM professional who enjoys solving complex technical challenges, building scalable solutions, and making identity management more efficient and secure. You’ll help shape how employees gain access to the systems and applications they need, from onboarding and provisioning to access requests, certifications, and ongoing governance.

You’ll work closely with application owners, IT, security, compliance, and business teams to develop reliable integrations, automate processes, and establish consistent access controls across the organization. The role also offers opportunities to take technical ownership, troubleshoot complex issues, mentor other team members, and continuously improve the SailPoint platform.

Required Skills & Experience

• Bachelor’s degree with 6 years of professional experience, a master’s degree with 3 years of professional experience, a PhD, or equivalent practical experience.

• Strong experience in enterprise identity and access management, particularly Identity Governance and Administration (IGA).

• Hands-on expertise with SailPoint Identity Security Cloud (ISC).

• Experience with identity lifecycle management, application and source onboarding, access requests, provisioning, access certifications, workflows, and governance policies.

• Proven experience implementing and delivering SailPoint ISC solutions in complex enterprise environments.

Desired Skills & Experience

• Experience designing identity architectures and managing identity lifecycles, governance, provisioning, and integrations.

• Familiarity with integrating HR systems, directories, IT service management platforms, and business applications.

• Knowledge of access control models, including role-based access control (RBAC), attribute-based access control (ABAC), birthright access, segregation of duties, and least privilege.

• Experience applying DevOps practices to IAM, including source control, CI/CD pipelines, automated testing, and controlled deployments.

• Understanding of identity data management, identity correlation, entitlement modeling, and policy enforcement.

• Experience with IAM automation, API-based integrations, and scripting.

• Familiarity with SAML, OAuth, OpenID Connect (OIDC), SCIM, LDAP, SQL, REST APIs, and Active Directory.

What You’ll Be Doing

• Design, build, and enhance identity governance solutions using SailPoint ISC.

• Develop and maintain workflows for identity lifecycle management, access requests, provisioning, certifications, and governance.

• Create scalable approaches for application onboarding and integration using APIs, SCIM, and modern identity standards.

• Partner with application owners and business, IT, security, and compliance teams to onboard applications and establish consistent governance practices.

• Design access control models that balance business needs with security requirements and least-privilege principles.

• Apply sound engineering practices to platform development and delivery, including CI/CD, version control, automated testing, and release management.

• Improve platform reliability through automation, monitoring, logging, configuration management, and environment separation.

• Investigate and resolve complex identity and access issues while supporting audits and compliance requirements.

• Provide technical guidance and mentorship to other IAM team members.

• Support the ongoing operation of the SailPoint platform, including incident resolution, production support, upgrades, and continuous improvement.

Technology Breakdown

The role centers on SailPoint ISC and the technologies used to connect identity governance with enterprise systems.

• Identity Governance: SailPoint Identity Security Cloud (ISC)

• Integration Technologies: APIs, SCIM, REST

• Identity Standards: SAML, OAuth, OIDC, LDAP

• Directories & Enterprise Systems: Active Directory, SQL, HR systems, ITSM platforms

• Engineering & Automation: CI/CD, source control, automated testing, configuration management, scripting

Day-to-Day Responsibilities

The exact time allocation across responsibilities has not been specified, but the role combines hands-on engineering with technical leadership and cross-functional collaboration.

• Hands-on SailPoint Engineering: Building, configuring, integrating, and improving identity governance solutions.

• Technical Leadership: Troubleshooting complex issues, establishing engineering best practices, and mentoring IAM colleagues.

• Stakeholder Collaboration: Working with application owners, IT, security, compliance, and business teams to deliver secure, effective access management.

• Platform Operations: Supporting production environments, improving reliability, and driving ongoing automation and operational improvements.

The Offer

• Medical, Dental, Vision insurance

• Competitive base pay plus bonus

• Generous PTO

• 401k plus match