SailPoint IAM Engineer

Title: SailPoint IAM Engineer
Location: Orlando, FL (Hybrid - Onsite required) Commutable to Orlando only.

IAM Engineer (Build & Automate Layer)

Role Overview
The AM Engineer will play a critical role in building, integrating, and automating identity and access management (IAM) solutions across the enterprise. This role is focused on turning architecture, policy, and design patterns into automated, productionready controls. The engineer will implement connectors, build workflows, integrate systems, automate identity functions, and ensure high-quality configuration and code across environments.
This position is ideal for someone who thrives as a builder/integrator and can independently deliver high-quality, reliable automation in a complex IAM environment.


Key Responsibilities

Implement

• SailPoint connectors
• AD / Entra provisioning logic
• Workflows including JML, exceptions, and emergency disable processes
• Dynamic groups
• Transforms and rules

Integrate

• HR and nonemployee source systems
• PAM solutions
• SIEM platforms
• Ticketing systems

Automate

• Identity refresh cycles
• Exception expirations
• Provisioning error handling and recovery processes

Support

• Lower/nonproduction environments
• System testing and validation cycles

Own

• Code quality
• Configuration and version management

Required Skills & Experience

• 3+ years of handson SailPoint configuration and build experience
• Working expertise with Active Directory / Entra ID
• Strong understanding of Azure IAM concepts
• Experience building and consuming REST APIs and working with JSON
• Strong PowerShell scripting capabilities
• Data management experience including schema definition
• Experience with identity standards including SCIM, SAML, OAuth, and OpenIDC

Engineering Competencies

• CI/CD concepts and deployment pipelines
• Environment promotion strategies
• Logging, monitoring, and troubleshooting IAM workloads
• Automation best practices:
  • Repeatable
  • Predictable outcomes
  • No duplication
  • Errorfree execution