SailPoint IIQ L3 Support Engineer

Job Overview

We are seeking an experienced SailPoint IdentityIQ (IIQ) Engineer to provide L2/L3 production support, development, customization, and maintenance of enterprise Identity and Access Management (IAM) solutions.

The ideal candidate will have strong hands-on experience with SailPoint IdentityIQ, application onboarding, identity lifecycle management, access provisioning, workflow customization, and production issue resolution. This role requires expertise in troubleshooting complex IAM issues, platform administration, integrations, and ensuring the stability and security of enterprise identity management environments.

Roles and Responsibilities

• Provide L2/L3 production support for SailPoint IdentityIQ, resolving complex incidents, service requests, and platform issues.
• Develop, customize, and maintain IIQ workflows, BeanShell rules, forms, lifecycle events, policies, and reports.
• Lead end-to-end application onboarding, including connector configuration, schema mapping, account correlation, aggregation, provisioning policies, testing, and production deployment.
• Configure and support identity aggregation, entitlement management, automated provisioning, deprovisioning, and Role-Based Access Control (RBAC).
• Manage Joiner-Mover-Leaver (JML) processes, access requests, approvals, and Lifecycle Manager (LCM) functionalities.
• Support access certification campaigns, periodic access reviews, Segregation of Duties (SoD) controls, and audit compliance.
• Troubleshoot integration issues involving Active Directory, Azure AD / Entra ID, LDAP, JDBC, REST APIs, SOAP services, and ServiceNow.
• Perform root cause analysis for provisioning failures, aggregation issues, and complex production incidents.
• Monitor and optimize IIQ platform performance, including database operations, application logs, and scheduled tasks.
• Support SailPoint IIQ upgrades, patching, environment promotions, and platform enhancements.
• Work closely with application, infrastructure, security, and business teams to ensure effective IAM operations.
• Maintain technical documentation, support ITIL processes, and mentor junior team members.

Required Qualifications

• 8+ years of experience in Identity and Access Management (IAM).
• Minimum 5+ years of hands-on experience with SailPoint IdentityIQ (IIQ).
• Strong experience in L2/L3 production support, development, customization, and administration of SailPoint IIQ.
• Expertise in BeanShell, Java, XML, workflows, rules, forms, and lifecycle events.
• Proven experience with end-to-end application onboarding and connector configuration.
• Strong understanding of identity aggregation, correlation, entitlement management, provisioning, and deprovisioning.
• Hands-on experience with Joiner-Mover-Leaver (JML), Lifecycle Manager (LCM), access certifications, and RBAC.
• Experience integrating SailPoint IIQ with Active Directory, Azure AD / Entra ID, LDAP, JDBC, REST APIs, SOAP, and ServiceNow.
• Strong Oracle Database and SQL knowledge, including query analysis, locking, and performance troubleshooting.
• Experience with Linux log analysis and application server environments such as Tomcat and WebLogic.
• Familiarity with Quartz Scheduler, IIQ Console, Debug Page, environment migration, patching, and upgrades.
• Understanding of ITIL incident, problem, and change management processes.
• Excellent troubleshooting, analytical, documentation, and communication skills.

Experience Requirements

• 8+ years of overall IAM experience.
• 5+ years of hands-on SailPoint IdentityIQ experience.
• Strong background in enterprise IAM production support and application onboarding.
• Experience handling critical production issues, root cause analysis, and platform performance optimization.
• Ability to independently manage technical deliverables and provide guidance to junior engineers.