Lead SailPoint Developer

Location: Downtown Houston, TX — 5 Days Onsite
Contract: 18–24 Months
Job Type: Contract

Job Description

We are seeking an experienced Lead SailPoint Developer to support a complex Identity and Access Management (IAM) migration initiative for a large enterprise environment. The successful candidate will provide hands-on technical leadership across the design, development, configuration, testing, migration, deployment, and stabilization of SailPoint solutions.

The ideal candidate will have deep expertise in SailPoint IdentityIQ, with particularly strong experience developing, troubleshooting, reviewing, and optimizing complex SailPoint Rules using Java and BeanShell.

Key Responsibilities

• Lead technical design and development activities for the SailPoint migration.

• Assess existing identity-management configurations, integrations, workflows, policies, connectors, and customizations.

• Develop, maintain, troubleshoot, and optimize complex SailPoint Rules using Java and BeanShell.

• Configure and customize SailPoint IdentityIQ based on business and security requirements.

• Design and implement application onboarding, account aggregation, identity correlation, provisioning, deprovisioning, and reconciliation processes.

• Develop and support Build Map, Connector, Correlation, Identity, Provisioning, Validation, Workflow, and Certification Rules.

• Migrate existing rules, workflows, connectors, policies, and integrations into the target SailPoint environment.

• Review legacy customizations and determine whether they should be migrated, redesigned, optimized, or retired.

• Develop custom connectors and integrations for applications that cannot use standard SailPoint connectors.

• Configure lifecycle events, access requests, approval workflows, roles, policies, and access certifications.

• Troubleshoot complex rule execution, provisioning, aggregation, performance, and integration issues.

• Conduct code reviews and establish development standards for SailPoint configurations and custom code.

• Partner with security, infrastructure, application, and business teams to translate IAM requirements into technical solutions.

• Create technical designs, migration documentation, deployment procedures, test scripts, and operational support documentation.

• Lead unit testing, integration testing, UAT, defect resolution, and production deployment activities.

• Mentor SailPoint developers and provide technical guidance throughout the project.

• Support production stabilization and knowledge transfer following the migration.

Required Qualifications

• 7+ years of Identity and Access Management (IAM) experience.

• 5+ years of hands-on SailPoint IdentityIQ development experience.

• Advanced experience developing and troubleshooting SailPoint Rules.

• Strong hands-on programming experience with:

  • Java

  • BeanShell

  • XML

  • REST APIs

  • JSON

  • SQL

  • Web Services

• Deep understanding of the SailPoint object model, APIs, workflows, rules, connectors, provisioning plans, and identity cubes.

• Demonstrated experience leading SailPoint migrations, upgrades, or major IAM platform transformations.

• Experience onboarding applications using:

  • JDBC

  • REST

  • SOAP

  • LDAP

  • Active Directory

  • Flat files

  • Other standard SailPoint connectors

• Strong knowledge of:

  • Identity aggregation

  • Identity correlation

  • Provisioning/deprovisioning

  • Access requests

  • Access certifications

  • Roles

  • Policies

  • Separation of Duties (SoD)

• Experience integrating SailPoint with Active Directory, Entra ID/Azure AD, HR platforms, directories, databases, and enterprise applications.

• Ability to analyze, refactor, and optimize complex custom rules for reliability, maintainability, and performance.

• Experience with Git or other source-control platforms and structured code promotion across environments.

• Strong troubleshooting, documentation, communication, and technical leadership skills.

Preferred Qualifications

• SailPoint IdentityIQ Engineer, Architect, or equivalent certification.

• Experience migrating from a legacy IAM platform to SailPoint.

• Experience upgrading SailPoint IdentityIQ across major versions.

• Familiarity with SailPoint Identity Security Cloud (ISC).

• Experience working in large, highly regulated enterprise environments.

• Knowledge of cybersecurity, privileged access management, authentication, authorization, and identity-governance best practices.

• Experience supporting audit, regulatory compliance, and access-control requirements.

Ideal Candidate

The ideal candidate is a hands-on SailPoint Technical Lead who can independently evaluate an existing IAM environment and guide its migration into SailPoint.

The candidate must be particularly strong in SailPoint Rules, Java, and BeanShell, with the ability to develop, review, debug, refactor, and optimize complex SailPoint logic.

This role is best suited for someone who can provide technical leadership while remaining actively involved in development, testing, deployment, troubleshooting, and production stabilization.