Sr Identity Access Management Engineer

Vizient; Irving (TX); On-site; USD 77,000 - 135,000; Full time

Job summary

Vizient seeks an experienced IAM Engineer to design, implement, and support SailPoint ISC and IIQ across cloud and on‑prem environments.

You will partner with Security, Risk, Audit, Technology, and business teams to deliver secure identity governance, lifecycle management, RBAC/ABAC models, and SoD controls.

The role demands hands‑on engineering, integrations via REST, SCIM, Java/BeanShell, PowerShell, and collaboration to modernize SailPoint migrations.

Qualifications

• 5+ years of progressive IAM experience with SailPoint ISC/IIQ.
• Hands-on experience implementing identity lifecycle, SoD, RBAC/ABAC models.
• Strong integration skills with AD/Entra ID, LDAP, HR systems, and cloud apps.
• Experience with REST/SCIM APIs, Java/BeanShell, PowerShell, Python, SQL.

Responsibilities

• Design, implement, configure, and maintain SailPoint ISC/IIQ solutions.
• Develop identity profiles, lifecycle states, provisioning policies, and workflows.
• Lead access governance, certification campaigns, and SoD initiatives.
• Integrate IAM with AD, Entra ID, LDAP, and SaaS apps; build REST/SCIM integrations.
• Support migration from IIQ to ISC and modernize SailPoint implementations.
• Collaborate across Security, Risk, Audit, Technology, and business teams.

Skills

SailPoint ISC

IdentityIQ IIQ

RBAC

ABAC

SoD

IAM lifecycle

REST APIs

SCIM

Java

BeanShell

PowerShell

Python

SQL

SAML 2.0

OAuth 2.0

OIDC

MFA

Zero Trust

CyberArk

BeyondTrust

Delinea

Okta

Entra ID

Education

Bachelor’s degree in CS/IS/Cybersecurity

Tools

SailPoint

Active Directory

Microsoft Entra ID

LDAP

HR systems

Cloud platforms

SaaS apps

CyberArk

BeyondTrust

Delinea

Okta

CI/CD

Job description

Summary

In this role, you will lead the design, implementation, and support of enterprise Identity and Access Management (IAM) solutions, with a primary focus on SailPoint Identity Security Cloud (ISC) and IdentityIQ (IIQ). You will deliver secure, scalable identity governance capabilities across cloud and on-premises environments, including identity lifecycle management, access governance, provisioning, role management, and system integrations. You will collaborate with Security, Risk, Audit, Technology, and business teams while providing technical leadership across complex IAM initiatives.

Responsibilities

• Design, implement, configure, and maintain SailPoint Identity Security Cloud (ISC) and IdentityIQ (IIQ) solutions.
• Develop and support identity profiles, lifecycle states, transforms, provisioning policies, workflows, rules, and access request processes.
• Design and maintain identity lifecycle management processes, including joiner, mover, leaver (JML), provisioning, de-provisioning, and access changes.
• Configure and support application onboarding, aggregation, reconciliation, identity correlation, and disconnected application integrations.
• Develop integrations using SailPoint APIs, REST APIs, SCIM, Java, BeanShell, PowerShell, and related technologies.
• Design and implement role-based access control (RBAC), attribute-based access control (ABAC), role mining, and role engineering solutions.
• Lead access certification, segregation of duties (SoD), access governance, and risk-based identity control initiatives.
• Support SailPoint IdentityIQ modernization and migration to SailPoint Identity Security Cloud, as applicable.
• Partner with Security, Risk, Audit, Technology, and business teams to translate security, compliance, and technical requirements into scalable IAM solutions.
• Implement governance controls and support audit and compliance requirements, including SOX, PCI-DSS, HIPAA, GDPR, ISO 27001, and NIST.
• Lead technical delivery across IAM initiatives, including requirements, solution design, testing, deployment, risks, dependencies, and stakeholder communication.
• Improve IAM processes, automation, security, and operational effectiveness while mentoring engineers and providing technical guidance across the team.

Qualifications

• Relevant degree in Computer Science, Information Systems, Cybersecurity, Engineering, Business, or related technical field preferred.
• 5 or more years of progressive Identity and Access Management (IAM) experience required.
• 5 or more years of hands‑on SailPoint Identity Security Cloud (ISC) and/or IdentityIQ (IIQ) implementation experience required.
• Experience implementing identity lifecycle management, access certifications, access requests, provisioning and de‑provisioning, role management, segregation of duties (SoD), and RBAC or ABAC models.
• Experience configuring SailPoint connectors, identity profiles, transforms, correlation rules, workflows, provisioning policies, certification campaigns, and access governance capabilities.
• Experience integrating IAM solutions with Active Directory, Microsoft Entra ID, LDAP, HR systems, cloud platforms, SaaS applications, and relational databases.
• Experience developing and supporting IAM integrations using REST APIs, SCIM, Java/BeanShell, PowerShell, Python, SQL, or similar technologies.
• Strong knowledge of IAM standards and technologies, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), federation, multi‑factor authentication (MFA), and Zero Trust principles.
• Experience delivering enterprise‑scale IAM solutions and working across complex cloud and on‑premises environments.
• Experience with privileged access management technologies such as CyberArk, BeyondTrust, Delinea, or similar platforms preferred.
• Experience with Okta, Microsoft Entra ID, SailPoint IdentityIQ‑to‑ISC migrations, enterprise RBAC, role mining, CI/CD practices, or related IAM technologies preferred.
• SailPoint Identity Security Cloud Engineer or SailPoint IdentityIQ Engineer Certification highly preferred; additional identity, cloud security, cybersecurity or information security certifications preferred.

Career Framework

Professional - Senior Associate (P3)

Estimated Hiring Range

At Vizient, we consider skills, experience, and organizational needs in our compensation approach. Geographic factors may adjust the range estimate and hires typically fall below the top range. Compensation decisions are tailored to individual circumstances. The current salary range for this role is $77,400.00 to $135,400.00.

This position is also incentive eligible.

Vizient has a comprehensive benefits plan! Please view our benefits here: http://www.vizientinc.com/about-us/careers