Назад
Company hidden
4 дня назад

Lead Identity & Access Management (IAM) Engineer (SailPoint)

Формат работы
onsite
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Lead Identity & Access Management (IAM) Engineer (SailPoint): Leading the engineering and technical direction of SailPoint IdentityIQ and Identity Security Cloud environments with an accent on identity governance, platform migration, application onboarding, and secure configuration. Focus on designing hybrid IIQ-to-ISC solutions, reviewing complex workflows and access models, mentoring engineers, and meeting SOX, GDPR, and PCI-DSS requirements.

Location: Plano, Texas, United States; onsite role. Candidates must have the right to work in the United States and must not require current or future immigration sponsorship.

Company

hirify.global provides mobility, automotive, finance, and insurance solutions through Toyota Financial Services.

What you will do

  • Lead engineering delivery and technical direction for SailPoint IdentityIQ and Identity Security Cloud.
  • Oversee platform configuration, integrations, identity profiles, sources, transforms, access profiles, roles, lifecycle states, and workflows.
  • Lead application onboarding for connected and disconnected applications, including connectors, Virtual Appliances, and provisioning configuration.
  • Direct contractor and partner engineering teams, review deliverables, and mentor IAM engineers.
  • Enforce secure engineering, code review, SDLC, release-readiness, and approved IAM architecture standards.
  • Oversee access requests, certifications, separation-of-duties capabilities, incident escalation, compliance alignment, and automation improvements.

Requirements

  • 7+ years of hands-on Identity and Access Management experience, including expert-level SailPoint Identity Security Cloud engineering.
  • Experience leading technical design and architecture for enterprise identity governance solutions, including design review and approval.
  • Experience leading or providing technical oversight for a SailPoint IdentityIQ-to-Identity Security Cloud migration, including hybrid coexistence.
  • Experience directing contractors, vendors, or systems integrator engineering teams and enforcing quality and security standards.
  • Deep expertise in identity lifecycle management, joiner/mover/leaver workflows, access certification, policy automation, and HR system integration.
  • Strong Identity Security Cloud experience with transforms, cloud rules, workflows, connectors, Virtual Appliances, and SailPoint REST APIs.
  • Strong understanding of identity governance, role and access modeling, separation-of-duties policies, and risk scoring.
  • Proficiency with SAML, OAuth2, OIDC, and SCIM, plus security best practices and SOX, GDPR, and PCI-DSS compliance frameworks.
  • Experience with Agile and SDLC practices and Jira, Confluence, and ServiceNow; ability to lead, mentor, and communicate across technical and leadership audiences.

Nice to have

  • Hands-on SailPoint experience with Bean Shell rules, workflows, application onboarding, and certifications.
  • SailPoint ISC certification or equivalent IAM/security certifications such as CISSP.
  • Experience integrating IAM solutions with AWS or Azure.
  • Familiarity with Okta or CIAM platforms including ForgeRock, Okta Customer Identity, or Auth0.
  • Bachelor’s degree in computer science, Information Security, or a related field.

Culture & Benefits

  • Collaborative, respectful, flexible work environment focused on teamwork and inclusion.
  • Professional growth programs and tuition reimbursement.
  • Comprehensive healthcare and wellness plans, paid holidays, and paid time off.
  • 401(k) savings plan with company match and potential annual retirement contribution.
  • Vehicle purchase discount, lease vehicle program where applicable, tax-advantaged accounts, family support services, and relocation assistance where applicable.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →