IAM/Active Directory Architect

Job Description

Job Description

Seeking a highly skilled Identity & Access Management (IAM) Engineer/Architect to lead the design, implementation, and support of enterprise identity governance solutions with a strong focus on SailPoint. This role is ideal for someone who enjoys solving complex identity challenges and remains actively involved in engineering, configuration, integrations, and operational support rather than functioning solely as a strategic architect.

Responsibilities

• Design, configure, implement, and support SailPoint identity governance solutions.
• Develop and maintain identity lifecycle processes including joiner, mover, and leaver workflows.
• Build and troubleshoot SailPoint application connectors, provisioning integrations, and access request workflows.
• Configure and manage role-based access control (RBAC) models, entitlement structures, and access certification campaigns.
• Develop and support custom SailPoint workflows, rules, scripts, and integrations using Java, Beanshell, REST APIs, and web services.
• Partner with infrastructure, security, cloud, and application teams to onboard new systems into the SailPoint platform.
• Design and implement automated provisioning and deprovisioning processes across Active Directory, Azure AD/Entra ID, cloud platforms, and enterprise applications.
• Analyze identity-related security risks and recommend technical solutions to improve governance and compliance.
• Troubleshoot complex provisioning, authentication, and identity synchronization issues.
• Support audit, compliance, and access review initiatives by providing technical expertise and reporting.
• Create and maintain technical documentation, solution designs, operational procedures, and governance standards.
• Participate in IAM roadmap planning while remaining actively involved in solution delivery and platform enhancements.

7+ years of IAM experience, including 4+ years of hands-on SailPoint IdentityIQ and/or Identity Security Cloud administration and engineering.

Strong expertise in Identity Governance & Administration (IGA), identity lifecycle management, access requests, certifications, role management, provisioning/deprovisioning, RBAC, and SoD controls.

Experience integrating SailPoint with Active Directory, Microsoft Entra ID, LDAP, HR systems, and enterprise SaaS applications.

Familiarity with REST APIs, web services, and application integration methodologies.

Scripting and automation experience using Java, Beanshell, PowerShell, Python, or similar technologies.

Strong understanding of authentication, authorization, privileged access, and identity governance best practices.

Proven ability to troubleshoot and resolve complex IAM and access management issues across diverse enterprise environments.