Senior SailPoint IIQ Engineer — IAM Production & Onboarding

Veriipro; Denver (CO); On-site; USD 120,000 - 160,000; Full time

Job summary

Veriipro is seeking an experienced SailPoint IdentityIQ (IIQ) Engineer to provide L2/L3 production support, development, customization, and maintenance of enterprise IAM solutions. The role requires hands-on work with onboarding, RBAC, JML, and SoD controls, plus strong integration experience with AD/Entra ID, LDAP, JDBC, REST/SOAP, and ServiceNow.

The ideal candidate will manage end-to-end onboarding, workflow customization, policy creation, and production issue resolution while collaborating

Qualifications

• 8+ years of experience in Identity and Access Management (IAM)
• Minimum 5+ years of hands-on experience with SailPoint IdentityIQ (IIQ)
• Strong experience in L2/L3 production support, development, customization, and administration of SailPoint IIQ
• Expertise in BeanShell, Java, XML, workflows, rules, forms, and lifecycle events
• Proven experience with end-to-end application onboarding and connector configuration
• Strong understanding of identity aggregation, correlation, entitlement management, provisioning, and deprovisioning
• Hands-on experience with JML, LCM, access certifications, and RBAC
• Experience integrating SailPoint IIQ with Active Directory, Azure AD / Entra ID, LDAP, JDBC, REST APIs, SOAP, and ServiceNow
• Strong Oracle Database and SQL knowledge, including query analysis, locking, and performance troubleshooting
• Experience with Linux log analysis and application server environments such as Tomcat and WebLogic
• Familiarity with Quartz Scheduler, IIQ Console, Debug Page, environment migration, patching, and upgrades
• Understanding of ITIL incident, problem, and change management processes
• Excellent troubleshooting, analytical, documentation, and communication skills

Responsibilities

• Provide L2/L3 production support for SailPoint IdentityIQ, resolving complex incidents and service requests
• Develop, customize, and maintain IIQ workflows, BeanShell rules, forms, lifecycle events, policies, and reports
• Lead end-to-end application onboarding, including connector configuration, schema mapping, account correlation, aggregation, provisioning policies, testing, and deployment
• Configure and support identity aggregation, entitlement management, automated provisioning, deprovisioning, and RBAC
• Manage Joiner-Mover-Leaver (JML) processes, access requests, approvals, and Lifecycle Manager (LCM) functionalities
• Support access certification campaigns, periodic access reviews, SoD controls, and audit compliance
• Troubleshoot integration issues involving AD, Azure AD/Entra ID, LDAP, JDBC, REST, SOAP, and ServiceNow
• Perform root cause analysis for provisioning failures, aggregation issues, and production incidents
• Monitor and optimize IIQ platform performance, including DB ops, logs, and scheduled tasks
• Support SailPoint IIQ upgrades, patching, environment promotions, and platform enhancements
• Collaborate with application, infra, security, and business teams to ensure IAM operations
• Maintain technical documentation and ITIL processes, mentor junior team members

Skills

SailPoint IIQ

IAM expertise

Troubleshooting

Java/XML

Onboarding workflows

RBAC provisioning

Unix/Linux

SQL/Oracle DB

Tools

BeanShell

Tomcat

WebLogic

Oracle DB

SQL

Quartz Scheduler

IIQ Console

Debug Page

JDBC

ServiceNow

LDAP

REST APIs

SOAP

Job description

Veriipro is seeking an experienced SailPoint IdentityIQ (IIQ) Engineer to provide L2/L3 production support, development, customization, and maintenance of enterprise IAM solutions. The role requires hands-on work with onboarding, RBAC, JML, and SoD controls, plus strong integration experience with AD/Entra ID, LDAP, JDBC, REST/SOAP, and ServiceNow.

The ideal candidate will manage end-to-end onboarding, workflow customization, policy creation, and production issue resolution while collaborating