Sailpoint IDN Engineer - Hybrid in Plano, TX

We are currently seeking a Technical Solutions Arch. Sr. Specialist – Hybrid to join our team in Plano, Texas. The position is a technical leader for identity lifecycle, entitlement engineering, and privileged access across enterprise IGA/PAM and cloud identity platforms. Key Responsibilities Technical ownership of user lifecycle and entitlement engineering across Active Directory, Entra ID, SaaS apps, and custom systems. Design, implement, and tune SailPoint IGA connectors, provisioning policies, role engineering, reconciliation, and certification campaigns. Onboard and manage CyberArk targets, vault policies, credential rotation, and privileged session controls. Architect and operate PKI and certificate issuance, renewal, revocation, and automation for service identities and TLS endpoints. Design Entra ID identity flows, conditional access, cross‑tenant syncs, and entitlement models; coordinate with AWS/GCP IAM as needed. Develop SCIM/SAML/OIDC connectors and scripts (PowerShell, Python) and Terraform/IaC for repeatable provisioning patterns. Lead Tier‑3 troubleshooting for provisioning failures, perform root‑cause analysis, implement permanent fixes, and reduce recurrence. Lead access reviews, entitlement remediation, evidence collection, and support internal/external audits. Create runbooks, operational playbooks, and train L1/L2 engineers. Required Qualifications 5+ years of hands‑on IAM experience with progressive responsibility in provisioning and identity engineering. Proven experience with SailPoint (IGA) and CyberArk (PAM) implementations. Deep operational knowledge of Entra ID / Azure AD and identity synchronization patterns. Strong understanding of PKI concepts and certificate management. Proficiency with identity protocols: SCIM, SAML, OAuth/OIDC, MFA. Advanced scripting and automation skills: PowerShell, Python, Bash; experience with Terraform or CloudFormation. Experience with ITSM/ticketing tools (ServiceNow, Jira) and SLA management. Demonstrated ability to perform complex troubleshooting and deliver durable engineering fixes. Preferred Qualifications Experience integrating HR systems (Workday, SuccessFactors) with IGA. Familiarity with Kubernetes RBAC, secrets management (Vault, Key Vault), and DevSecOps CI/CD integration. Certifications: SailPoint, CyberArk, Microsoft Identity/Entra, CISSP, or equivalent. Soft Skills and Logistics Analytical, detail oriented with strong problem‑solving and RCA discipline. Effective communicator able to influence engineering, security, and business stakeholders. Proven mentor and team player who improves operational maturity. Employment type: Full‑time or contract. Location: Remote / Hybrid / On‑site. Reports to: IAM Operations or Security Architecture Lead. Compensation: Starting pay range $89,300 – $124,000. Actual compensation depends on work location, experience, technical skills, and other qualifications. Eligible for incentive compensation based on performance. Benefits: medical, dental, vision insurance; flexible spending or health savings account; life and AD&D insurance; short and long term disability; paid time off; employee assistance; 401(k) with company match; other voluntary or legally‑required benefits. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For Pay Transparency information, please click here. For EEO rights under the law, please click here. #J-18808-Ljbffr NTT DATA