Are you a lifelong learner, and passionate about solving complex IAM problems? Then join our IAM Engineering team. This role will be responsible for designing, developing, testing, implementing, maintaining, and supporting identity and access management (IAM) solutions to ensure the security and efficiency of the organization's IT infrastructure. This role involves working closely with various groups to understand their IAM needs and providing expert guidance on standard methodologies and solutions.
Key Responsibilities Include:
- Extensive hands-on experience in SailPoint IIQ LCM and connector/automation implementation.
- Serve as an SME (Subject Matter Expert) for Identity and Access Management domain.
- Design, develop, and implement technical solutions as part of our Identity and Access Management strategy to meet risk and compliance regulations.
- Develop and maintain technical documentation, technical diagrams, and visual workflows.
- Lead IAM projects by executing and delivering automation, integrations, connectors, and self-service capabilities to end users, and building dashboards/reporting.
- The ability to communicate with all levels of the organization in a comprehensive manner (i.e., translating and presenting technical information to business).
- Manage priorities, deliverables, by partnering with cross-functional teams and third-party vendors.
- Act with accountability and responsibility.
- Dedication to continuous improvement, security process engineering, and operational excellence.
- Support internal and external audits and risk assessments.
Requirements:- Hands-on Expertise (5+ years) in SailPoint IdentityIQ platform features and functionality.
- Hands-on experience in scripting/developing one of the following: Java, JavaScript, PowerShell, BeanShell, Python, Visual Basic
- Hands-on experience with integrating SailPoint with other third-party systems (SaaS/PaaS) and developing custom forms, workflows, quicklinks, reporting and enhancing entitlement reviews overall process.
- Hands-on experience with different types of connectors - Webservice APIs, SCIM, JDBC, Delimited Feed File, SFTP connectors.
- Hands-on experience with SailPoint infrastructure, upgrades, and performance tuning.
- Knowledge of all different types of databases such as MSSQL, MYSQL, Aurora RDS/EC2 Postgres, Oracle, and DB2.
- Knowledge of platforms such as Windows, Linux, Unix, and RACF Mainframe.
- Solid understanding of security risk, implementation of mitigating controls and compliance standards including SOX, SOC, MAR, and NYDFS.
- Knowledge of entitlement reviews, native changes, offboarding, onboarding, transfer, advance SOD configuration
- Knowledge of Active Directory, Entra ID, OKTA, LDAP directories.
- Experience developing and continuously improving processes, procedures, and controls.
- Proactive mindset and ability to work independently on numerous projects/activities at the same time with minimal oversight.
- Excellent customer focus is on supporting a positive customer service climate.
- Experience working closely with IT engineers to solve problems, think critically, design and implement solutions,
- Strong written and verbal communication with the ability to synthesize information.
- Experience with DevOps, CI/CD, and AWS.
- Experience with AI Control Plane, and Non-Human Identities (NHI)
- Strong knowledge of IAM concepts, technologies, and standard processes.
- Experience with AWS IAM and Identity Center
- Experience with IAM platforms, including Okta, PingFederate, SailPoint, CyberArk, and Microsoft Azure AD/Entra ID.
- Experience with reverse proxy solutions, including Okta Access Gateway and Microsoft App Proxy.
- A "lifelong learner" of new concepts and technical capabilities.
- After hours and weekend support - as needed.
- DR Support - as needed
Salary Range:$99,150.00 - $162,885.00
The salary range reflected above is a good faith estimate of base pay for the primary location of the position. The salary for this position ultimately will be determined based on the education, experience, knowledge, and abilities of the successful candidate. In addition to salary, this role may also be eligible for annual, sales, or other incentive compensation.
Our PromiseAt Guardian, you'll have the support and flexibility to achieve your professional and personal goals. Through skill-building, leadership development and philanthropic opportunities, we provide opportunities to build communities and grow your career, surrounded by diverse colleagues with high ethical standards.
Inspire Well-BeingAs part of Guardian's Purpose - to inspire well-being - we are committed to offering contemporary, supportive, flexible, and inclusive benefits and resources to our colleagues. Explore our company benefits at Benefits apply to full-time eligible employees. Interns are not eligible for most Company benefits.
Equal Employment OpportunityGuardian is an equal opportunity employer. All qualified applicants will be considered for employment without regard to age, race, color, creed, religion, sex, affectional or sexual orientation, national origin, ancestry, marital status, disability, military or veteran status, or any other classification protected by applicable law.
AccommodationsGuardian is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. Guardian also provides reasonable accommodations to qualified job applicants (and employees) to accommodate the individual's known limitations related to pregnancy, childbirth, or related medical conditions, unless doing so would create an undue hardship. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Please note: this resource is for accommodation requests only. For all other inquires related to your application and careers at Guardian, refer to the Guardian Careers site.
Visa SponsorshipGuardian Life is not currently or in the foreseeable future sponsoring employment-based visas (e.g., such as an H-1B). In order to be a successful applicant, you must be legally authorized to work in the United States, without the need for employer sponsorship/support now or at any time in the future.
Notice Regarding Guardian's Use of Artificial Intelligence in RecruitmentAs part of Guardian's job application process, Guardian may use artificial intelligence tools ("AI Tools") to automate the sorting and filtering of information provided by applicants as part of its preliminary screening. This preliminary screening may be used to help identify applicant materials and resumes relative to their indication that the applicant meets the requirements for the specific job for which they are applying, as specified in the listing posted on Guardian's jobs website (Careers at Guardian at At Guardian, we do not use AI Tools to substantially assist or replace human judgment or discretionary decision making in our hiring process. All hiring decisions will be made by Guardian colleagues.
Please be aware that if you apply for a specific position with Guardian, you will have the choice of opting out of Guardian's use of AI Tools during the job application process. If you would like to request an alternative process that does not utilize AI Tools or would like to request a reasonable accommodation, within ten business days of your position application, you must email your request to , making sure to provide your name and job requisition identification number. Guardian will retain your applicant materials and resume and all information therefrom in accordance with Guardian's document retention policy, a copy of which you may request via
Additionally, at applicable times, Guardian will make public the most recent bias audit results for such AI tools, which may be found here.
Current Guardian Colleagues: Please apply through the internal Jobs Hub in Workday.
