Sr. IAM SailPoint Engineer

Akaasa Technologies; Chicago (IL); Hybrid; USD 130,000 - 180,000; Full time

Job summary

Akaasa Technologies is seeking an IAM SailPoint Engineer to design, develop, and support IGA platforms including SailPoint ISC and NERM. You will build complex integrations, automate identity workflows, and ensure secure identity architecture across the enterprise.

The role collaborates with IAM leadership, cybersecurity, HRIS, and infrastructure teams to meet HIPAA, NIST, and Zero Trust requirements, while supporting applications across on-prem and cloud environments.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity or related field OR equivalent experience.
• 7+ years hands-on experience engineering or developing IGA solutions.
• Strong experience with SailPoint Identity Security Cloud and/or IdentityIQ.
• Demonstrated experience writing SailPoint Rules (BeanShell/Java) and building custom workflows.
• Strong scripting experience (PowerShell, JavaScript, Python, BeanShell).
• Experience with SCIM, REST APIs, SAML, OAuth2, OIDC integrations.
• Understanding of identity lifecycle management, RBAC/ABAC, SoD, and identity architecture.
• Experience with AD, Entra ID, LDAP, HRIS, and cloud identity platforms.
• Ability to work in a complex healthcare environment.

Responsibilities

• Design, develop, and maintain SailPoint Rules (Before/After Provisioning, Aggregation, Correlation, Custom Workflows).
• Build and optimize provisioning workflows, lifecycle event logic, and identity orchestration.
• Engineer and maintain custom connectors, integration logic, and SailPoint configurations.
• Develop custom SailPoint transforms, policies, and identity processing logic.
• Troubleshoot provisioning, aggregation, and connector failures.
• Lead onboarding of new applications into SailPoint, including schema discovery and entitlement modeling.
• Support integration using SCIM, REST APIs, SAML, OAuth2, OIDC.
• Engineer identity data flows between SailPoint, AD, Entra ID, HRIS, EMR systems, and cloud platforms.
• Develop automation using PowerShell, BeanShell, JavaScript, Python; create API-based automation.
• Maintain version-controlled code and secure development practices.
• Troubleshoot directory synchronization issues; engineer cloud identity governance for Azure, AWS, GCP.
• Support identity federation, SSO, MFA, and authentication architecture.
• Serve as escalation point; perform root cause analysis and long-term fixes.

Skills

SailPoint Identity Cloud

BeanShell/Java scripting

REST APIs / API integrations

PowerShell / Python / JavaScript

RBAC / ABAC / SoD

Identity lifecycle management

Education

Bachelor's degree in IT or related field

Tools

SailPoint Identity Security Cloud

IdentityIQ

Active Directory

Entra ID

LDAP

SCIM

REST APIs

SAML / OAuth2 / OIDC

Job description

Notes:

• Local ONLY! - Proof of location is required to submit. No Utility or Wifi Bills. DL is required or a real time picture of mailing address on mail. No digital bill is printed! Real time proof or I will pass. (I will check Address and if any fake or nonexistent or questionable address I will Pass)
• Linkedin must match Resume, or resume will not be reviewed. No altered resumes or profiles!

Shift: Hybrid - (Mainly remote must come in as needed) - handful of days per month

Job Description

The IAM SailPoint Engineer is responsible for the design, development, customization, and advanced technical support of our Identity Governance & Administration (IGA) platforms, including SailPoint Identity Security Cloud (ISC) and Non Employee Risk Management (NERM). This role builds and maintains complex integrations, develops automation, engineers SailPoint rules and workflows, and ensures scalable, secure identity architecture across the enterprise.

The IAM SailPoint Engineer partners with IAM leadership, cybersecurity, HRIS, infrastructure, and application teams to deliver modern identity solutions aligned with HIPAA, NIST, Zero Trust, and internal governance requirements.

Key Responsibilities

SailPoint Engineering & Development:

Design, develop, and maintain SailPoint Rules (Before/After Provisioning, Aggregation, Correlation, Custom Workflows).

Build and optimize complex provisioning workflows, lifecycle event logic, and identity orchestration.

Engineer and maintain custom connectors, integration logic, and advanced SailPoint configurations.

Develop custom SailPoint transforms, policies, and identity processing logic.

Perform advanced troubleshooting of provisioning, aggregation, and connector failures.

Application Onboarding & Integration Engineering:

Lead onboarding of new applications into SailPoint, including:

• schema discovery
• connector engineering
• entitlement modeling
• provisioning/deprovisioning logic
• aggregation job tuning

Build and support integration using:

• SCIM
• REST APIs
• SAML
• OAuth2
• OIDC

Engineer identity data flows between SailPoint, AD, Entra ID, HRIS, EMR systems, and cloud platforms.

Automation and Scripting:

Develop automation using PowerShell, BeanShell, JavaScript, Python, or similar languages.

Build scripts to support identity lifecycle operations, data cleanup, and system integrations.

Create API based automation for identity data exchange and workflow optimization.

Maintain version controlled code repositories and follow secure development practices.

Directory and Cloud Identity Engineering:

Engineer identity integrations with Active Directory, Entra ID, LDAP, and cloud identity platforms.

Troubleshoot complex directory synchronization issues, attribute conflicts, and provisioning logic.

Engineer cloud identity governance for Azure, AWS, and/or GCP.

Support identity federation, SSO, MFA, and authentication architecture.

Operational Support:

Serve as the escalation point for complex SailPoint and identity issues.

Perform root cause analysis and implement long term technical fixes.

Maintain technical documentation, integration patterns, and engineering standards.

Support after-hours maintenance windows.

Required Qualifications:

Bachelor's degree in Information Technology (IT), Computer Science, Cybersecurity, or a related field OR equivalent experience.

7+ years of hands on experience engineering or developing IGA solutions.

Strong experience with SailPoint Identity Security Cloud and/or IdentityIQ.

Demonstrated experience writing SailPoint Rules (BeanShell/Java) and building custom workflows.

Strong scripting experience (PowerShell, JavaScript, Python, BeanShell).

Experience engineering integrations using SCIM, REST APIs, SAML, OAuth2, OIDC.

Strong understanding of identity lifecycle management, RBAC/ABAC, SoD, and identity architecture.

Experience with Active Directory, Entra ID, LDAP, HRIS systems, and cloud identity platforms.

Ability to work in a complex, unionized healthcare environment.

Preferred Qualifications:

SailPoint Engineer or Architect certification.

Experience engineering identity integrations with Cerner, Epic or other EMR identity models.

Experience with cloud identity governance (Azure, AWS, GCP).

Experience with Postman, API testing, and integration debugging.

Experience supporting large scale identity modernization initiatives.

Key Competencies:

Strong engineering mindset with ability to design scalable identity solutions.

Ability to translate business requirements into technical architecture.

Strong troubleshooting and analytical skills.

Clear communication skills with ability to explain complex technical concepts.

Commitment to secure, compliant, and resilient identity operations.

Ability to collaborate across cybersecurity, infrastructure, HRIS, and application teams.