Specialist IS Engineer

• Lead end-to-end SailPoint architecture (target state, reference architectures, patterns, roadmaps) for hybrid and cloud ecosystems.
• Translate IAM/IGA business needs into solution designs: identity data model, authoritative sources, JML (joiner/mover/leaver), access model, governance controls.
• Engineer advanced capabilities (beyond configuration): custom workflows, rules/scripts, integrations, APIs, plugins, UI extensions, and reusable frameworks.
• Define, Customize and launch enterprise access reviews
• Define integration strategy for AD/Entra ID, HR systems (e.g., Workday), enterprise apps (e.g., Salesforce), databases, cloud platforms using REST/SOAP/SCIM and event/file-based patterns.
• Design and implement RBAC/ABAC strategy, role mining approach, entitlement modeling, and scalable certification/access request patterns.
• Establish engineering standards: SDLC, secure coding, code reviews, CI/CD, automated testing strategy, environment promotion, versioning.
• Design for non-functional requirements: performance, HA/DR, auditability, resiliency, and regulatory alignment.
• Provide technical leadership: design reviews, mentoring, and resolving complex engineering issues/root cause analysis.

Basic qualifications

• 813 years overall experience with 68+ years hands-on SailPoint architecture/engineering across end-to-end implementations (IIQ and/or ISC).
• Strong IGA domain knowledge: provisioning, lifecycle, certifications, SoD, access requests, role/entitlement governance.
• Development experience in Java, scripting using Beanshell and enterprise integration (REST/SOAP/SCIM 2.0).
• Solid understanding of SDLC, test planning/automation, and delivery in Agile/iterative models.
• Familiarity with security/compliance frameworks (e.g., NIST, ISO 27001) and regulations (e.g., GDPR, HIPAA).

Preferred qualifications

• Architecture experience integrating with Workday / Oracle Cloud / Salesforce and modern IAM stack (Entra ID/Okta/Ping, PAM tools).
• Strong database understanding (Oracle, MSSQL, PostgreSQL, etc.) and performance tuning mindset.
• DevOps/automation exposure (pipelines, IaC concepts, scripting).

Certifications (preferred)

• SailPoint Certified IdentityIQ Engineer / Associate, CISSP, PMP.

Working model

• May occasionally support work outside business hours
• Travel up to ~10% (domestic/international)
• Rotational shift as needed