Senior SailPoint IdentityIQ (IIQ) L3 Technical Analyst

ALTEN; Durham (NC); On-site; USD 140,000 - 180,000; Full time

Job summary

ALTEN is seeking a senior SailPoint IIQ engineer to own hands-on development and integration efforts within a distributed international delivery team. The role focuses ~80% SailPoint IIQ development and ~20% functional/business analysis, with direct ownership of complex upgrades and migrations.

You will work autonomously, lead technical efforts, ensure security best practices (AD/Azure Entra, IAM lifecycle, access governance), and be willing to travel to France as needed.

Qualifications

• 7+ years of hands-on SailPoint IdentityIQ (IIQ) development including workflows, rules, forms, connectors and APIs.
• End-to-end ownership of at least one major SailPoint upgrade or platform migration, with lead responsibility.
• Demonstrated technical leadership, mentoring developers and driving a workstream.
• Strong IAM security fundamentals including AD/Azure Entra ID integration, lifecycle management, access governance and SD/access certification.

Responsibilities

• Develop, troubleshoot and take technical ownership within SailPoint IIQ with a distributed team (80% hands-on).
• Perform functional/business analysis for SailPoint-related work (20%), translating requirements into technical solutions.
• Lead release activities and support quarterly/major deployments; provide production support as needed.
• Communicate effectively in English and collaborate with an international delivery team.

Skills

SailPoint IIQ development

Technical leadership

IAM security fundamentals

English communication

Tools

APIs

Azure/Entra ID

Job description

Full-time contract engagement, roughly 80% hands-on SailPoint IIQ development and 20% functional/business analysis. This is a senior, hands-on technical position — not a Business Analyst role. The consultant will develop, troubleshoot, and take technical ownership within SailPoint IdentityIQ, working alongside a distributed, international delivery team.

Required Experience — Must-Have

• 7+ years of hands-on SailPoint IdentityIQ (IIQ) development: workflows, rules, forms, custom connectors, and APIs.
• Personal, end-to-end ownership of at least one major SailPoint upgrade or platform migration — including impact assessment, testing, cutover, and rollback planning. Having “participated in” an upgrade is not the same as having led one.
• Demonstrated technical leadership: has mentored developers, set technical standards, or driven a workstream. Profiles that read as primarily functional / requirements-gathering, without strong hands-on development depth, have not been a fit for this specific role.
• Strong IAM security fundamentals: Active Directory and Azure/Entra ID integration, identity lifecycle management (joiner-mover-leaver), access governance, segregation of duties, and access certification / review processes.
• Experience supporting ongoing release cycles — quarterly or major releases, integration troubleshooting, production support.
• Able to work autonomously while actively guiding a distributed / international delivery team, not just coexisting with one.
• Strong spoken and written English.
• Willing and able to travel to France periodically if project needs require it.
• Eligible to work in the US without sponsorship; US citizens and Green Card holders preferred.

Strongly Preferred — Differentiators

• A SailPoint certification (IdentityIQ or Identity Security Cloud).
• Hands-on exposure to SailPoint Identity Security Cloud (ISC) / IdentityNow, or direct experience migrating from IIQ to a cloud-based identity governance platform.
• Integration experience with a privileged access management platform (e.g., CyberArk).
• Healthcare, life sciences, or other GxP / regulated-industry experience.
• A track record that the candidate can describe in specific, quantifiable terms — not a generic list of tools and technologies.