Senior SailPoint IAM Engineer

Natick, MAHybridFull Time$160k - $200kA leading technology organization is looking for a Senior SailPoint IAM Engineer to help strengthen and improve its enterprise identity and access management program. This role focuses on building and maintaining identity governance solutions using SailPoint Identity Security Cloud (ISC), APIs, SCIM, and modern DevOps practices.This is an opportunity for an experienced IAM professional who enjoys solving complex technical challenges, building scalable solutions, and making identity management more efficient and secure. You’ll help shape how employees gain access to the systems and applications they need, from onboarding and provisioning to access requests, certifications, and ongoing governance.You’ll work closely with application owners, IT, security, compliance, and business teams to develop reliable integrations, automate processes, and establish consistent access controls across the organization. The role also offers opportunities to take technical ownership, troubleshoot complex issues, mentor other team members, and continuously improve the SailPoint platform.Required Skills & ExperienceBachelor’s degree with 6 years of professional experience, a master’s degree with 3 years of professional experience, a PhD, or equivalent practical experience.Strong experience in enterprise identity and access management, particularly Identity Governance and Administration (IGA).Hands-on expertise with SailPoint Identity Security Cloud (ISC).Experience with identity lifecycle management, application and source onboarding, access requests, provisioning, access certifications, workflows, and governance policies.Proven experience implementing and delivering SailPoint ISC solutions in complex enterprise environments.Desired Skills & ExperienceExperience designing identity architectures and managing identity lifecycles, governance, provisioning, and integrations.Familiarity with integrating HR systems, directories, IT service management platforms, and business applications.Knowledge of access control models, including role-based access control (RBAC), attribute-based access control (ABAC), birthright access, segregation of duties, and least privilege.Experience applying DevOps practices to IAM, including source control, CI/CD pipelines, automated testing, and controlled deployments.Understanding of identity data management, identity correlation, entitlement modeling, and policy enforcement.Experience with IAM automation, API-based integrations, and scripting.Familiarity with SAML, OAuth, OpenID Connect (OIDC), SCIM, LDAP, SQL, REST APIs, and Active Directory.What You’ll Be DoingDesign, build, and enhance identity governance solutions using SailPoint ISC.Develop and maintain workflows for identity lifecycle management, access requests, provisioning, certifications, and governance.Create scalable approaches for application onboarding and integration using APIs, SCIM, and modern identity standards.Partner with application owners and business, IT, security, and compliance teams to onboard applications and establish consistent governance practices.Design access control models that balance business needs with security requirements and least-privilege principles.Apply sound engineering practices to platform development and delivery, including CI/CD, version control, automated testing, and release management.Improve platform reliability through automation, monitoring, logging, configuration management, and environment separation.Investigate and resolve complex identity and access issues while supporting audits and compliance requirements.Provide technical guidance and mentorship to other IAM team members.Support the ongoing operation of the SailPoint platform, including incident resolution, production support, upgrades, and continuous improvement.Technology BreakdownThe role centers on SailPoint ISC and the technologies used to connect identity governance with enterprise systems.Identity Governance: SailPoint Identity Security Cloud (ISC)Integration Technologies: APIs, SCIM, RESTIdentity Standards: SAML, OAuth, OIDC, LDAPDirectories & Enterprise Systems: Active Directory, SQL, HR systems, ITSM platformsEngineering & Automation: CI/CD, source control, automated testing, configuration management, scriptingDay-to-Day ResponsibilitiesThe exact time allocation across responsibilities has not been specified, but the role combines hands-on engineering with technical leadership and cross-functional collaboration.Hands-on SailPoint Engineering: Building, configuring, integrating, and improving identity governance solutions.Technical Leadership: Troubleshooting complex issues, establishing engineering best practices, and mentoring IAM colleagues.Stakeholder Collaboration: Working with application owners, IT, security, compliance, and business teams to deliver secure, effective access management.Platform Operations: Supporting production environments, improving reliability, and driving ongoing automation and operational improvements.The OfferMedical, Dental, Vision insurance Competitive base pay plus bonusGenerous PTO401k plus match