IAM Engineer (Salipoint IdentityIQ and Security Cloud) -15 + years of experience

Job Title: IAM Engineer (SailPoint IdentityIQ and Identity Security Cloud) - 15+ Yrs Exp

Location: BROADWAY, NYC, NY (Hybrid Role - 3 days Onsite)

Duration: 12 months

We are currently seeking candidates who meet the following qualifications:

• 15+ years of IT experience, with deep hands-on SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC) development, administration and architecture.
• Design, implement and maintain SailPoint IIQ and ISC solutions, including workflows, connectors and application onboarding; experience migrating from IIQ to ISC.
• IIQ engineering: BeanShell rules, custom workflows, lifecycle events, task definitions and plugins; custom connectors, aggregation, reconciliation and provisioning adapters; certification campaigns, SoD controls and governance reporting; extending IIQ with Java, REST APIs, SCIM and custom UI components.
• IAM architecture: end-to-end identity architecture, joiner/mover/leaver automation, RBAC/ABAC frameworks, role mining and access modeling; architecture diagrams and data flows; design reviews and threat modeling.
• ServiceNow integration: access request, approval routing and fulfillment workflows; ticket-based provisioning and deprovisioning; catalog item governance.
• Directory and integration: Active Directory, LDAP, Microsoft Entra ID (Azure AD) including PIM, HR systems and cloud applications; REST/SOAP and SCIM; SAML, OAuth, OIDC and MFA.
• Integrating IAM with AWS, Azure or Google Cloud Platform; PAM tools, SailPoint Access History and Access Modeling.
• Okta and Citizen IAM / external user identity experience is a strong plus.
• Zero Trust and least privilege; automated controls for SOX, HIPAA, ISO 27001 and NIST.
• Production support: break/fix, patching, upgrades, performance tuning, root cause analysis, documentation and runbooks.
  Please submit your application via the link provided on LinkedIn. Do not call the general line.