Role Overview :

We are seeking an Identity Platform Engineer to build, enhance, and operate enterprise identity solutions that support secure access across employees, applications, and technology platforms.

This role focuses on turning identity management into a scalable, automated platform. You will work across SailPoint, Microsoft Entra ID, Active Directory, identity governance, application integrations, and authentication technologies, while improving the reliability and security of identity lifecycle processes.

What Youll Work On :

Identity Platform Engineering :

- Design, configure, and maintain enterprise IAM capabilities using platforms such as SailPoint, Microsoft Entra ID, and Active Directory.

- Develop scalable identity solutions with a focus on availability, security, maintainability, and operational efficiency.

- Establish reusable patterns for identity lifecycle management and application integration.

Identity Lifecycle Automation :

- Build automated Joiner, Mover, and Leaver (JML) workflows based on employee lifecycle events.

- Automate account creation, modification, access assignment, and deactivation.

- Replace manual and exception-driven processes with policy-based identity workflows.

- Partner with HR and IT teams to ensure identity changes are reflected accurately across connected systems.

Access Provisioning & Governance :

- Develop provisioning and deprovisioning processes for enterprise applications and directories.

- Implement birthright access, role-based access control (RBAC), and request-based access models.

- Ensure access decisions follow business policies and the principle of least privilege.

- Support access certification campaigns, periodic reviews, approvals, and audit requirements.

Application Integration :

- Onboard applications into the organization's identity governance ecosystem.

- Develop and maintain integrations using APIs, SCIM, LDAP, and other identity integration mechanisms.

- Configure identity connectors and troubleshoot synchronization and provisioning issues.

- Support centralized identity management and SSO across enterprise applications.

Authentication & SSO :

- Work with modern authentication and federation technologies including SAML, OAuth 2.0, and OpenID Connect (OIDC).

- Support secure SSO implementations and directory synchronization.

- Help application teams adopt consistent enterprise authentication standards.

SailPoint Engineering :

- Develop and maintain SailPoint connectors, workflows, rules, transforms, and policies.

- Customize identity processes to support business-specific requirements.

- Build reusable components that improve automation and reduce operational effort.

- Monitor platform behavior and address integration or synchronization issues.

Troubleshooting & Platform Reliability :

- Diagnose provisioning failures, identity synchronization problems, authentication issues, and connector errors.

- Perform detailed root-cause analysis and implement sustainable fixes.

- Monitor recurring issues and identify opportunities for platform-level improvements.

Automation & Scripting :

- Develop scripts and automation using PowerShell, Java, Python, or suitable technologies.

- Automate repetitive IAM operations and create reusable engineering solutions.

- Improve operational workflows through scripting and platform customization.

Collaboration & Documentation :

- Work with HR, Infrastructure, Cybersecurity, Application, and DevOps teams to deliver identity solutions.

- Document identity architectures, workflows, integrations, configurations, and operational procedures.

- Contribute to knowledge repositories, runbooks, standards, and continuous improvement initiatives.

Required Experience :

- 5+ years of experience working on enterprise identity platforms or IAM engineering.

- At least 3 years of hands-on SailPoint experience, including connectors, rules, transforms, workflows, and policies.

- Strong experience implementing automated JML / identity lifecycle processes.

- Experience onboarding applications into an identity governance framework.

- Hands-on knowledge of RBAC, birthright access, and request-based access.

- Practical experience provisioning and deprovisioning users across Active Directory, Microsoft Entra ID, and enterprise applications.

- Strong understanding of SAML, OAuth 2.0, OIDC, and directory synchronization.

- Ability to troubleshoot complex identity integrations and resolve issues through root-cause analysis.

- Programming or scripting experience with PowerShell, Java, Python, or similar technologies.

- Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.

Preferred Experience :

- Experience working with identity governance standards and enterprise security controls.

- Exposure to application onboarding at scale and reusable integration patterns.

- Experience maintaining IAM runbooks, technical documentation, and internal knowledge bases.

- Experience improving identity platform standards, automation, and operational processes.

Ideal Candidate :

The ideal candidate is an IAM engineer with a platform mindset who can move beyond day-to-day access administration and build reliable, automated identity capabilities. You should be comfortable working across identity governance, application integrations, authentication, automation, and enterprise security while collaborating with multiple technical teams.