IAM Engineer - Identity & Access Management SailPoint · SSO & Federation

• *ABOUT THE ROLE**

This is a **development\-heavy** IAM engineering role for a hands\-on SailPoint IIQ practitioner. You will design, build, and implement identity solutions — owning the full development lifecycle from requirements through to post\-production support. Operational support is minimal; the expectation is that you write code, build workflows, and solve hard identity problems.

• *KEY RESPONSIBILITIES**

• *SailPoint IIQ Development (70%)**

• Design, develop, and implement SailPoint IIQ solutions including workflows, rules, and connectors
• Build and enhance Joiner, Mover, Leaver (JML) lifecycle workflows end\-to\-end
• Develop automation using APIs, custom connectors, and SailPoint OOTB connectors
• Work across the full SDLC: requirements gathering, development, UAT support, security reviews, production deployment, and post\-production support
• Prepare deployment artifacts, technical documentation, and operational runbooks
• Support critical P1/P2 incidents when escalated

• *SSO \& Federation Integration (30%)**

• Configure and support SSO integrations using Ping Identity (preferred), ADFS, or equivalent platforms
• Implement and troubleshoot federation using SAML 2\.0, OAuth 2\.0, and OpenID Connect (OIDC)
• Collaborate with application and infrastructure teams during SSO onboarding

• *Governance \& Lifecycle Management**

• Implement and maintain access governance frameworks including access certifications and SoD controls
• Support RBAC modelling and entitlement management within SailPoint IIQ
• Collaborate with operations teams during deployment windows and change cycles

• *REQUIRED SKILLS \& EXPERIENCE**

• *Non\-Negotiable**

• 8\+ years of overall IT experience
• 4\+ years of hands\-on SailPoint IIQ development — workflows, rules, BeanShell, connectors
• 2\+ years of SSO implementation experience; Ping Identity strongly preferred
• Strong development proficiency: Java, PowerShell, REST API integrations
• Deep understanding of SailPoint Lifecycle Management (JML), Access Governance, and OOTB connectors
• Proven experience across the complete SDLC in an enterprise environment
• Working knowledge of SAML 2\.0, OAuth 2\.0, and OIDC

• *Good to Have**

• Experience with SailPoint Identity Security Cloud (ISC)
• Exposure to PAM tools (CyberArk, BeyondTrust)
• Background in banking, financial services, or regulated sectors
• SailPoint certifications (IdentityIQ Engineer or equivalent)