Sr. Lead, IGA Engineer - SailPoint ISC

Newell Brands; Atlanta (GA); Hybrid; USD 136,000 - 187,000; Full time

Job summary

Newell Brands is seeking an experienced IGA Engineer specializing in SailPoint Identity Security Cloud (ISC) to join our IAM team. This SME will architect, build, and operate SailPoint ISC environments at enterprise scale, leading complex implementation workstreams with minimal supervision.

The role requires hands-on configuration and development, including API automation, transforms, and connector development, and collaboration across IT, HR, and security functions.

Qualifications

• Minimum 5–7 years in Identity Governance & Administration with at least 3 years on SailPoint ISC.
• Demonstrable SME-level experience across SailPoint ISC: sources, provisioning, certifications, roles, transforms, rules.
• Experience delivering end-to-end IGA implementations in enterprise scale.
• Hands-on experience with SailPoint ISC REST API and Postman collections for testing.

Responsibilities

• Serve as SailPoint ISC platform SME, own architecture decisions and standards.
• Design, build, and optimize ISC configurations including provisioning policies and roles.
• Architect entitlement management, SoD and least-privilege access controls.
• Lead joiner/mover/leaver lifecycle automation and birthright access provisioning.
• Integrate ISC with SAP HCM and other enterprise systems.

Skills

SailPoint ISC

Postman API testing

BeanShell scripting

Identity governance

SoD/LPA controls

Lifecycle automation

Connector development

SAP IAM integration

RBAC/ABAC design

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Postman

SailPoint Connector SDK

SailPoint REST API

Job description

Job ID

16300

Alternate Locations

Company Overview

Newell Brands is a leading consumer products company with a portfolio of iconic brands like Graco®, Coleman®, Oster®, Rubbermaid®, Sharpie® and Yankee Candle® - and 24,000 talented teammates around the world. Our culture is built on values in action: Integrity, Teamwork, Passion for Winning, Ownership, and Leadership. We work together to win, grow, and make a real impact—supported by a high-performing, inclusive, and collaborative environment where you can be your best, every day.

POSITION DETAILS

Position Title: IGA Engineer – SailPoint ISC

Location: Hybrid

Reports To: Darren Whitfield – Sr. Manager, IAM Security

Department: Information Security / Identity & Access Management

Employment Type: Full-Time

Position Summary

We are seeking a seasoned and highly skilled IGA Engineer with deep, hands‑on expertise in SailPoint Identity Security Cloud (ISC) to join our Identity & Access Management team. This is a subject matter expert (SME) role, not a generalist position — the successful candidate will have architected, built, and operated SailPoint ISC environments at scale and will be capable of leading complex implementation workstreams independently.

The engineer will serve as the technical authority for our IGA platform, driving platform maturity, connector development, transform engineering, and integration across enterprise systems including SAP. This role demands proficiency in both the configuration and development dimensions of SailPoint ISC, including hands‑on API/Postman-driven automation, BeanShell/Rule scripting, and transform authoring.

Key Responsibilities

Platform Architecture & Engineering

• Serve as the SailPoint ISC platform SME, owning architecture decisions, platform roadmap contributions, and technical standards.
• Design, build, and optimize ISC configurations including source onboarding, provisioning policies, role modelling, and access profiles.
• Architect and implement entitlement management, separation of duties (SoD) controls, and least‑privilege access (LPA) frameworks.
• Lead the design and delivery of joiner/mover/leaver (JML) lifecycle workflows and birthright access provisioning.
• Evaluate and implement SailPoint NERM (Non‑Employee Risk Management) and ARM (Access Risk Management) capabilities.

Connector Development & Integrations

• Develop, configure, and maintain connectors for SAP (HCM, ECC, GRC, S/4HANA, Ariba, Concur), Salesforce, IBMi, and other enterprise systems.
• Build and maintain SailPoint ISC SaaS Connectivity connectors using the Connector SDK and REST‑based custom connectors.
• Design and implement Virtual Appliance (VA) configurations and cluster management for on‑premises source connectivity.
• Integrate ISC with HR systems of record (e.g., Workday, SAP HCM) to drive authoritative source feeds.

Transform Engineering & Scripting

• Author, test, and maintain SailPoint ISC transforms (Velocity, Seaspray, and rule‑based) using Postman and the SailPoint ISC REST API.
• Use Postman collections to build, validate, and automate transform testing workflows and connector configuration management.
• Write and maintain BeanShell rules for complex provisioning logic, correlation, and identity attribute manipulation.

Access Governance & Compliance

• Design, configure, and manage access certification campaigns including user access reviews (UAR), entitlement reviews, and role reviews.
• Maintain RBAC and ABAC frameworks, including role mining, role composition, and automated access assignment policies.
• Support audit and compliance activities related to SOX, GDPR, and internal IAM policy requirements.
• Partner with GRC and audit teams to ensure access controls meet regulatory and internal policy standards.
• Produce and maintain platform documentation, runbooks, and governance artefacts for audit readiness.

Collaboration & Technical Leadership

• Act as the IGA technical escalation point for the broader IAM team, resolving complex platform and integration issues.
• Collaborate with application owners, HR, Legal, and security teams to gather requirements and deliver IGA solutions.
• Provide technical mentorship to less experienced IGA engineers and analysts on SailPoint ISC best practices.
• Engage with SailPoint Compass community and maintain awareness of platform releases, roadmap changes, and new capabilities.
• Participate in after‑hours support windows for critical IGA platform incidents where required.

Experience

REQUIRED QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline; equivalent practical experience considered.
• Minimum 5–7 years of experience in Identity Governance & Administration with at least 3 years focused exclusively on SailPoint ISC (IdentityNow).
• Demonstrable SME-level experience across the SailPoint ISC platform: sources, provisioning, certifications, roles, transforms, and rules — not limited to configuration.
• Strong track record of delivering end‑to‑end IGA implementations, including complex multi‑source environments at enterprise scale.
• Proven experience authoring and testing transforms using the SailPoint ISC REST API and Postman (collections, environments, automated test scripts).
• Hands‑on experience with SailPoint ISC Connector SDK and custom connector development.
• Deep experience integrating SailPoint ISC with complex enterprise applications, including SAP and other widely used business platforms — supporting both read and provisioning use cases.
• Experience managing joiner/mover/leaver lifecycle automation, birthright access, SoD enforcement, and LPA initiatives in ISC.
• Use scripting and development skills to automate tasks, improve data quality, support integrations, and resolve platform issues.

Technical Skills

• SailPoint ISC: sources, access profiles, roles, transforms, provisioning plans, policies, certifications, workflows (ISC Workflow Engine), and VA management.
• SailPoint ISC REST API: proficient use via Postman for transforms, source schema management, account aggregation triggering, and platform automation.
• Connector types: SaaS Connectivity, JDBC, Web Services, Flat File, PowerShell, SCIM, and Direct Connect.
• SAP IAM: SoD‑aware role design, GRC AC integration, S/4HANA connector configuration.
• Directory services: Active Directory, Entra ID (Azure AD), LDAP.
• Identity standards: SCIM 2.0, OAuth 2.0, SAML 2.0, OpenID Connect.
• Familiarity with SailPoint NERM and ARM modules.
• Understanding of CI/CD practices as they relate to IGA configuration

Preferred Qualifications

• SailPoint Certified IdentityNow Engineer or SailPoint Certified IdentityNow Architect credential.
• Experience with SailPoint ISC Workflows (the native workflow engine) for advanced lifecycle event automation.
• Exposure to SailPoint AI‑driven access recommendations and Role Discovery features.
• Experience contributing to or reviewing SailPoint Compass community knowledge articles or connector contributions.
• Background in broader PAM/IAM tooling (e.g., CyberArk, BeyondTrust, Okta) complementing an IGA‑first skill set.
• Familiarity with Agile/Scrum delivery methodologies within a security or IAM programme context.
• Experience in a manufacturing, retail, or consumer goods regulated environment.

KEY COMPETENCIES

• Technical depth — operates at platform internals level, not just UI configuration.
• Problem ownership — self‑directed in root‑cause analysis and resolution of complex IGA issues.
• Communication — able to translate technical IGA concepts for non‑technical stakeholders and governance audiences.
• Continuous learning — tracks SailPoint ISC release notes, roadmap announcements, and community best practices proactively.
• Collaborative mindset — partners effectively across security, IT, HR, and business teams

The Remote base pay range for this position is from $136,000 to $187,000. Salary will be based on prior experience related to the skills required for this position.

Newell Brands (NASDAQ: NWL) is a leading global consumer goods company with a strong portfolio of well‑known brands, including Rubbermaid, Sharpie, Graco, Coleman, Rubbermaid Commercial Products, Yankee Candle, Paper Mate, FoodSaver, Dymo, EXPO, Elmer’s, Oster, NUK, Spontex and Campingaz. We are focused on delighting consumers by lighting up everyday moments. Newell Brands and its subsidiaries are Equal Opportunity Employers and comply with applicable employment laws. EOE/M/F/Vet/Disabled are encouraged to apply.