IAM Engineer

Role: IAM Engineer 

Location: Greensboro, NC (Hybrid with 3 days/week onsite) 

Duration: 12+ Months (with possible extension) 

Job description: 

Role Summary

We are seeking a hands-on IAM Engineer to design, build, and enhance enterprise identity governance and administration (IGA) capabilities. You will own development of workflows, rules, connectors, plugins, access certifications, and lifecycle events in SailPoint IIQ (v8.x), work with Application teams to deliver scalable and secure identity services. The ideal candidate brings 5–6 years of engineering experience with a strong Java/Beanshell foundation, lead team of junior developers and a proven track record implementing end-to-end IGA solutions in IIQ.

Required Skills & Experience (Must-Have)

· 5–6 years of hands-on engineering experience; 4–5 years focused on SailPoint IdentityIQ in production at enterprise scale.

· Proficiency in Java and Beanshell for IIQ rules, task executors, connectors, and plugin development.

· Strong command of IIQ core modules: Identity Warehouse/Cubes, Applications/Connectors, Entitlements, Policies, LCM, Access Request, Certifications, Tasks/Task Schedules, Reports.

· Experience with aggregation, correlation, provisioning, reconciliation, and identity lifecycle events.

· Hands-on with Active Directory/Azure AD, LDAP, databases (SQL), ServiceNow integration, EPIC, RACF and HR systems as authoritative sources.

· API integration experience (REST/SOAP/SCIM), JSON/XML, and secure secret handling.

· CI/CD & DevOps: Git, branching strategies, Maven/ANT, Jenkins/Azure DevOps, environment configuration, and artifact promotion.

· Solid understanding of RBAC/SOD, access governance, and audit/compliance.

· Comfortable with Unix/Linux, shell scripting, and application server administration (Tomcat).

· Troubleshooting expertise using IIQ debug pages, logs, and iiq console; ability to triage complex provisioning errors.

Nice-to-Have / Preferred

· Experience with SailPoint IIQ 8.x features (e.g., enhanced plugins, improved REST frameworks, cloud connectors).

· Exposure to SailPoint IdentityNow and/or SailPoint SaaS connectors, Cloud (Azure/AWS/Google Cloud Platform) identity targets.

· Knowledge of PKI, Secrets Management (CyberArk).

· Performance engineering for large certifications, campaign tuning, and high-volume aggregation/provisioning.

· Experience in healthcare industries and control mapping to HIPAA/SOX.

· SailPoint Certified (IIQ Engineer/Developer) preferred.

Soft Skills

· Ownership mindset with ability to translate requirements into robust, maintainable designs.

· Team Leadership & Mentorship Ability to guide and mentor junior developers by providing technical direction, conducting code reviews, sharing best practices, and ensuring high-quality delivery within the IAM/SailPoint development team.

· Strong communication and stakeholder management across Security, App Teams, and Audit.

· Documentation-first approach (design specs, sequence diagrams, runbooks).

· Agile delivery: Experience with Scrum/Kanban, backlog grooming, and incremental releases.