Sr Identity Access Management Engineer

Vizient, Inc; Irving (TX); On-site; USD 77,000 - 135,000; Full time

Benefits offered by this job

Incentive eligibility

Comprehensive benefits plan

Job summary

Vizient, Inc. is seeking an experienced IAM Engineer to lead design, implementation, and support of SailPoint ISC and IdentityIQ across cloud and on‑prem environments.

You will deliver scalable identity governance, lifecycle management, and RBAC/ABAC, while collaborating with security, risk, and business teams. The role emphasizes integration with Active Directory, HR systems, and cloud platforms, plus governance for SOX, PCI-DSS, HIPAA and ISO27001.

Qualifications

• Degree in a technical field; relevant IAM experience required.
• 5+ years in Identity and Access Management (IAM).
• 5+ years with SailPoint ISC and/or IdentityIQ implementations.
• Experience with identity lifecycle, provisioning, access governance, and SoD controls.
• Experience configuring SailPoint connectors, governance capabilities, and RBAC/ABAC models.
• Experience integrating IAM with AD/Entra ID, LDAP, HR systems, and cloud services.

Responsibilities

• Design, implement, configure, and maintain SailPoint ISC/IIQ solutions.
• Develop identity profiles, lifecycle states, transforms, and provisioning policies.
• Manage identity lifecycle processes (joiner/mover/leaver).
• Configure onboarding, aggregation, reconciliation, and disconnected app integrations.
• Develop IAM integrations using REST APIs, SCIM, Java/BeanShell, and PowerShell.
• Lead RBAC/ABAC, role mining, and access governance initiatives.
• Support audit/compliance requirements (SOX, PCI-DSS, HIPAA, GDPR).
• Mentor engineers and improve IAM processes and security.

Skills

IAM experience

SailPoint ISC/IIQ

RBAC/ABAC

OAuth2/OpenID Connect

MFA/Zero Trust

Cloud/on-prem IAM design

REST APIs

Active Directory/Entra ID

SailPoint certifications

Identity lifecycle management

Education

Bachelor’s degree in Computer Science / related field

Tools

SailPoint Identity Security Cloud

IdentityIQ

Java

BeanShell

PowerShell

SCIM

Active Directory

Job description

When you’re the best, we’re the best. We instill an environment where employees feel engaged, satisfied and able to contribute their unique skills and talents while living and working as their authentic selves. We provide extensive opportunities for personal and professional development, building both employee competence and organizational capability to fuel exceptional performance through an inclusive environment both now and in the future.

Summary

In this role, you will lead the design, implementation, and support of enterprise Identity and Access Management (IAM) solutions, with a primary focus on SailPoint Identity Security Cloud (ISC) and IdentityIQ (IIQ). You will deliver secure, scalable identity governance capabilities across cloud and on‑premises environments, including identity lifecycle management, access governance, provisioning, role management, and system integrations. You will collaborate with Security, Risk, Audit, Technology, and business teams while providing technical leadership across complex IAM initiatives.

Responsibilities

• Design, implement, configure, and maintain SailPoint Identity Security Cloud (ISC) and IdentityIQ (IIQ) solutions.
• Develop and support identity profiles, lifecycle states, transforms, provisioning policies, workflows, rules, and access request processes.
• Design and maintain identity lifecycle management processes, including joiner, mover, leaver (JML), provisioning, de‑provisioning, and access changes.
• Configure and support application onboarding, aggregation, reconciliation, identity correlation, and disconnected application integrations.
• Develop integrations using SailPoint APIs, REST APIs, SCIM, Java, BeanShell, PowerShell, and related technologies.
• Design and implement role‑based access control (RBAC), attribute‑based access control (ABAC), role mining, and role engineering solutions.
• Lead access certification, segregation of duties (SoD), access governance, and risk‑based identity control initiatives.
• Support SailPoint IdentityIQ modernization and migration to SailPoint Identity Security Cloud, as applicable.
• Partner with Security, Risk, Audit, Technology, and business teams to translate security, compliance, and technical requirements into scalable IAM solutions.
• Implement governance controls and support audit and compliance requirements, including SOX, PCI‑DSS, HIPAA, GDPR, ISO27001, and NIST.
• Lead technical delivery across IAM initiatives, including requirements, solution design, testing, deployment, risks, dependencies, and stakeholder communication.
• Improve IAM processes, automation, security, and operational effectiveness while mentoring engineers and providing technical guidance across the team.

Qualifications

• Relevant degree in Computer Science, Information Systems, Cybersecurity, Engineering, Business, or related technical field preferred.
• 5 or more years of progressive Identity and Access Management (IAM) experience required.
• 5 or more years of hands‑on SailPoint Identity Security Cloud (ISC) and/or IdentityIQ (IIQ) implementation experience required.
• Experience implementing identity lifecycle management, access certifications, access requests, provisioning and de‑provisioning, role management, segregation of duties (SoD), and RBAC or ABAC models.
• Experience configuring SailPoint connectors, identity profiles, transforms, correlation rules, workflows, provisioning policies, certification campaigns, and access governance capabilities.
• Experience integrating IAM solutions with Active Directory, Microsoft Entra ID, LDAP, HR systems, cloud platforms, SaaS applications, and relational databases.
• Experience developing and supporting IAM integrations using REST APIs, SCIM, Java/BeanShell, PowerShell, Python, SQL, or similar technologies.
• Strong knowledge of IAM standards and technologies, including SAML2.0, OAuth2.0, OpenID Connect (OIDC), federation, multi‑factor authentication (MFA), and Zero Trust principles.
• Experience delivering enterprise‑scale IAM solutions and working across complex cloud and on‑premises environments.
• Experience with privileged access management technologies such as CyberArk, BeyondTrust, Delinea, or similar platforms preferred.
• Experience with Okta, Microsoft Entra ID, SailPoint IdentityIQ‑to‑ISC migrations, enterprise RBAC, role mining, CI/CD practices, or related IAM technologies preferred.
• SailPoint Identity Security Cloud Engineer or SailPoint IdentityIQ Engineer Certification highly preferred; additional identity, cloud security, cybersecurity or information security certifications preferred.

#LI-JB1 #IDS

Estimated Hiring Range: At Vizient, we consider skills, experience, and organizational needs in our compensation approach. Geographic factors may adjust the range estimate and hires typically fall below the top range. Compensation decisions are tailored to individual circumstances. The current salary range for this role is $77,400.00 to $135,400.00. This position is also incentive eligible. Vizient has a comprehensive benefits plan! Please view our benefits here: http://www.vizientinc.com/about-us/careers

Equal Opportunity Employer: Females/Minorities/Veterans/Individuals with Disabilities The Company is committed to equal employment opportunity to all employees and applicants without regard to race, religion, color, gender identity, ethnicity, age, national origin, sexual orientation, disability status, veteran status or any other category protected by applicable law.

Working at Vizient means shaping the future of healthcare, every day. Alongside our clients, we're building a healthier, more human healthcare system. We connect people, data, and solutions to enable healthcare organizations to improve financial sustainability, enhance system performance, and deliver better care.

Headquartered in Irving, Texas, with 11 offices across the United States, Vizient has more than 5,000 employees who bring deep expertise and a shared commitment to transforming healthcare. Together, we're solving some of the industry's most complex challenges while creating opportunities to learn, grow, and drive lasting change for healthcare organizations and the communities they serve.

Our Enterprise of Companies

• Apexus - The exclusive contractor for 340B Drug Pricing Program, managed by the Health Resources and Services Administration.
• aptitude - The industry's first online direct contracting market, supporting self‑contracting activity between hospitals and suppliers.
• Kaufman Hall - Leading healthcare advisory services to support our clients in achieving financial, clinical, and operational excellence.
• Provista - Proven supply chain partner specializing in extended, diagnostic, and preventive care facilities, including surgery centers, home health, and senior living.