Position: Identity Platform Engineer (Sailpoint)

Overall/Total Experience: 5-8 years only

Location: Hyderabad

Working Days: 5 Days Working from office

Notice Period Requirement: 30 Days (Maximum)

Client's Company Size: Startup / Small Enterprise

Role & Responsibilities:

- Design, implement, and maintain enterprise Identity & Access Management (IAM) solutions.

- Configure and manage platforms such as SailPoint, Microsoft Entra ID, and Active Directory.

- Build automated workflows for employee onboarding, role changes, and offboarding.

- Automatically provision and deprovision user accounts and application access based on HR events.

- Build and maintain connectors using APIs, SCIM, LDAP, or other integration methods.

- Enable Single Sign-On (SSO) and centralized identity management across applications.

- Design and maintain RBAC models.

- Define birthright access for new employees based on their department or role.

- Implement access governance policies and approval workflows.

- Maintain audit logs and ensure compliance with security and regulatory requirements.

- Configure and support authentication protocols such as: SAML, OAuth 2.0, OpenID Connect (OIDC).

- Enable secure Single Sign-On across enterprise applications.

- Investigate and resolve provisioning failures, synchronization issues, authentication errors, and connector problems.

- Create custom workflows, rules, transforms, and scripts within SailPoint.

- Automate repetitive IAM processes using scripting languages such as PowerShell, Java, or Python where applicable.

- Coordinate with IT Infrastructure, Security, Application Owners, and DevOps teams to onboard applications and manage access.

Candidate Requirements:

- Must have 5+ years of total experience engineering enterprise identity platforms, with a minimum of 3 years hands-on SailPoint (connectors, rules, transforms, workflows, policies).

- Must have experience building JML lifecycle automation (joiner/mover/leaver), turning manual, exception-heavy identity processes into automated, policy-driven platform components.

- Must have experience owning application onboarding into an identity governance model - birthright access, RBAC, and request-driven access.

- Must have hands-on experience provisioning and deprovisioning access across Active Directory, Entra ID, and enterprise applications.

- Must have a solid grip on SAML, OAuth2, OIDC, and directory sync.

- Must have strong troubleshooting skills across provisioning flows and integrations, with a focus on root-cause fixes over workarounds.

- Must have a degree in CS / IT / Engineering or equivalent.