IAM Engineer

Required Expereince: 12+ Years

• Develop and maintain integration components across IAM/IGA platforms, with current emphasis on SailPoint IdentityIQ.
• Build and tune aggregation connectors, including REST, SOAP, JDBC, AD/LDAP, and custom connector patterns.
• Implement schema discovery, entitlement modeling, correlation logic, and provisioning policies to ensure accurate identity lifecycle operations.
• Develop secure, reusable Java-based components including rules, plugins, workflows, and JAR modules leveraging SailPoint s object model and bestpractice coding standards..
• Drive connector enhancements, refactors, defect resolution, and performance optimization.
• Design onboarding patterns for new application integrations, including standardized templates for schemas, correlation, provisioning, and entitlement modeling.
• Implement connector-level error handling, retry logic, and reconciliation tuning to ensure reliability and auditability of identity operations.
• Develop extensible integration frameworks that support future connectors, custom endpoints, and reusable provisioning logic.
• Build and maintain robust identity data flows across SQL Server and/or Oracle environments.
• Develop schema mapping logic, attribute transformation routines, and normalization rules for account, entitlement, and role data.
• Troubleshoot data integrity issues, reconcile inconsistencies, and ensure completeness/accuracy of identity data sources.

• Engineer onboarding automation frameworks supporting metadata ingestion, entitlement cataloging, usertoentitlement assignments, and lifecycle management.
• Build bulk-data workflows with rollback, validation, tracking, and audit evidence.
• Create standardized onboarding templates, scripts, and validation utilities to accelerate application integration efficiency.
• Implement Gitdriven workflows for version control, code review, and artifact promotion across DEV, IT, UAT, and PROD environments.
• Package, test, and deploy rulesets, workflows, and integration modules using standardized release governance.
• Maintain environment configuration parity and support deployment verification during golive.
• Write and execute unit tests, system integration tests (SIT), user acceptance tests (UAT), and production validation tests.
• Conduct rootcause analysis for defects and coordinate with development, operations, and application teams for remediation.
• Ensure integration changes adhere to enterprise quality, reliability, and security expectations.
• Apply IAM governance principles including Segregation of Duties (SoD), auditability, certification processes, and evidence capture.
• Ensure integrations meet SOX, SOC, internal audit, and enterprise security standards.
• Create documentation supporting audit readiness design documents, test evidence, deployment runbooks, and compliance mappings.
• Partner with application owners, IAM engineering teams, security architects, and platform admins to design scalable integration solutions.
• Translate requirements into technical designs and provide guidance on integration patterns and identity best practices.
• Deliver knowledgetransfer sessions to operational teams and contribute to shared engineering standards.

Technical Skills

• 4 7+ years of experience in IAM/IGA engineering roles.
• Handson experience with SailPoint IdentityIQ.
• Strong Java (JDK 8+) engineering background, including plugin, rule, and JAR development.
• Proficiency with SQL Server and/or Oracle; advanced understanding of relational identity data structures.
• Expertise in REST/SOAP APIs, schema mapping, ETLlike transformations, and integration pipelines.
• Familiarity with IGA object models and identity data constructs (accounts, entitlements, roles, policies).

IAM & Security Skills

• Solid understanding of identity lifecycle management, provisioning/deprovisioning processes, and governance workflows.
• Experience applying IAM controls such as SoD, recertification, audit trails, and privileged access standards.
• Knowledge of authentication and directory technologies (AD/LDAP, cloud identity providers, SCIM, SSO/MFA patterns).

DevOps & Delivery Skills

• Experience with Git-based CI/CD workflows, environment promotion, and release governance.
• Strong testing discipline across unit, integration, and functional testing.
• Ability to build reusable, scalable integration frameworks and adhere to secure coding practices.

Soft Skills

• Excellent communication and documentation capabilities.
• Ability to lead discussions with technical and nontechnical users.
• Strong analytical problemsolving skills and high accountability for quality and reliability.

Preferred Qualifications

• Experience with cloud-based identity systems (Azure AD/Entra ID, Okta, Saviynt, ForgeRock, etc.).
• Knowledge of scripting languages (Python, PowerShell, Groovy).
• Experience building identity integrations in highly regulated environments.
• Background in data engineering or API orchestration.

Success Criteria

• Delivery of accurate, highperforming identity integrations with minimal production defects.
• Reduction in onboarding cycle time through automation and reusable integration frameworks.
• Strong crossteam collaboration enabling smooth onboarding of applications and identity data sources.
• Compliance with security, audit, and governance requirements across all integration activities.