Senior Associate: Identity & Access Management (IAM) Developer

Identity & Access Management Developer

Location Designation: Hybrid - 3 days per quarter

As part of Technology, you'll have the opportunity to contribute to groundbreaking initiatives that shape New York Life's digital landscape. Leverage cutting-edge technologies like Generative AI to increase productivity, streamline processes, and create seamless experiences for clients, agents, and employees. Your expertise fuels innovation, agility, and growth — driving the company's success.

The Identity & Access Management (IAM) Developer is a senior, hands-on engineering role responsible for designing, developing, and supporting enterprise IAM capabilities at New York Life. This role focuses heavily on SailPoint IdentityIQ (IIQ) development, Java-based customization, and Python-driven automation, while also providing technical leadership and mentorship within the IAM engineering team.

In addition to deep technical expertise, this role requires strong managerial and leadership skills. The IAM Developer is expected to lead workstreams, guide junior developers, partner closely with architecture and security stakeholders, and help translate business and regulatory requirements into scalable IAM solutions.

As IAM continues to evolve alongside automation and artificial intelligence, this role will also contribute to the responsible use of AI-enabled tooling within IAM, including reporting, analytics, and productivity enhancements.

What You'll Do:

• Design, develop, test, and implement scalable IAM solutions aligned with enterprise security standards and business requirements.
• Develop and maintain SailPoint IdentityIQ (IIQ) capabilities including workflows, provisioning policies, custom forms, rules, reports, certifications, and integrations.
• Build and enhance identity lifecycle automation for joiner, mover, and leaver (JML) processes.
• Develop custom connectors and integrations using JavaBeans, Java, web services, and APIs.
• Leverage Python scripting to automate IAM processes, reporting, and operational tasks.
• Support role-based access control (RBAC), role mining, and access certification campaigns within SailPoint IIQ.
• Troubleshoot and resolve complex IAM issues across development, test, and production environments.
• Participate in platform upgrades, patching, and security hardening activities.

Technical Leadership & Collaboration

• Serve as a senior technical resource and subject matter expert for IAM development activities.
• Provide technical guidance, code reviews, and mentorship to junior developers and engineers.
• Lead or support development workstreams within larger IAM initiatives and programs.
• Collaborate with IAM architecture, Information Security, Infrastructure, and Application teams to design secure integrations.
• Translate business, audit, and regulatory requirements into technical IAM solutions.
• Contribute to technical documentation, design artifacts, and operational runbooks.

Governance, Risk & Operations

• Ensure IAM solutions comply with internal security standards, audit requirements, and regulatory expectations (e.g., NYS DFS, NIST).
• Support certification, attestation, and access review processes.
• Assist with incident response, root cause analysis, and remediation related to IAM services.
• Establish and track metrics to measure IAM development efficiency, quality, and operational health.

Automation, AI & Productivity (Nice to Have)

• Utilize Microsoft Power Platform tools (Power Automate, Power BI, Power Apps) to enhance IAM reporting, dashboards, and workflow automation.
• Explore and responsibly apply GenAI tools to improve developer productivity, code quality, documentation, and operational insights.
• Contribute ideas for future-state IAM capabilities leveraging analytics, automation, and AI-assisted decisioning.
• Experience with Agentic AI systems, including multi-step reasoning, tool use, and autonomous workflows
• Hands-on experience building RAG (Retrieval-Augmented Generation) pipelines using vector databases and LLMs
• Familiarity with Model Context Protocol (MCP) servers or similar LLM integration frameworks
• Exposure to LLM orchestration frameworks (e.g., LangChain, Bedrock Agents) and prompt optimization

What You'll Bring:

• Bachelor's degree in Computer Science, Information Systems, or equivalent experience.
• 7+ years of experience in Information Technology with a strong focus on Identity & Access Management.
• 5+ years of hands-on SailPoint IdentityIQ (IIQ) development experience.
• Strong proficiency in Java / JavaBeans and experience developing custom SailPoint components.
• Strong scripting and automation experience using Python.
• Experience integrating IAM solutions with directories, databases, and enterprise applications.
• Solid understanding of identity and access management concepts, including provisioning, de-provisioning, access certifications, and SoD controls.
• Experience with identity protocols and standards such as SAML, OAuth, OpenID Connect, LDAP, and SCIM.
• Ability to work across teams, manage priorities, and communicate effectively with technical and non-technical stakeholders.
• Demonstrated leadership, mentoring, and workstream management skills.

Preferred / Nice-to-Have Qualifications

• Experience with Microsoft Power Platform (Power BI, Power Automate, Power Apps).
• Exposure to GenAI tools and AI-assisted development workflows.
• Experience working in large enterprise or financial services environments.
• Familiarity with cloud and hybrid IAM architectures.
• IAM-related certifications (e.g., SailPoint IIQ certifications, CISSP).

Key Competencies

• Strong analytical and problem-solving skills
• Attention to detail and commitment to secure coding practices
• Ability to balance hands-on development with leadership responsibilities
• Curiosity and willingness to learn emerging IAM, automation, and AI technologies
• Effective communication and collaboration skills

Pay Transparency

Salary Range: $124,000-$177,000

Overtime eligible: Exempt

Discretionary bonus eligible: Yes

Sales bonus eligible: No

Actual base salary will be determined based on several factors but not limited to individual's experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program.