Principal SailPoint Engineer

This is a fully remote position, open to applicants in North Carolina, +3 more states.

📋 Description

• The Principal SailPoint Engineer will oversee adherence to Optiv AFC processes and procedures, while managing and maintaining security systems within both internal and client environments.

• This role involves close collaboration with Management, Solution Architects, and Principal Security Engineers from various internal teams and clients to deliver critical services to existing AFC clients.

• The Principal SailPoint Engineer will act as the primary responder for AFC customer systems, taking ownership of client configuration issues and ensuring they are tracked until resolution.

• The Identity and Access Management (IAM) Engineer will be tasked with designing, implementing, and managing SailPoint ISC and IIQ to protect sensitive information and ensure compliance with regulatory standards in our client environments.

• SailPoint ISC and IIQ will be the main tools utilized, requiring additional knowledge in other PAM and IAM products such as CyberArk and Okta.

• Collaborate with cross-functional teams, lead IAM initiatives, and contribute to the formulation and execution of the client's overall security strategy.

• Review and provide insights on established strategies and multi-year plans that encompass all aspects of IGA and IAM, including access requests, lifecycle events, provisioning functions, role-based access, separation of duties, and access certifications.

• Architect, design, develop, and troubleshoot IGA solutions while providing technical and architectural design documentation, recommendations, specifications, use cases, requirements, and test cases.

• Develop solutions that promote full automation, self-service capabilities, and resiliency.

• Implement customizations to meet customer business requirements.

• Engage in security and application troubleshooting as well as incident resolution alongside other infrastructure teams, including storage, messaging, server, and network.

• Provide engineering support for complex and recurring incidents related to IAM platforms and conduct root cause analyses in accordance with customer policies and standards.

• Responsible for the standards, design, and operation of SailPoint and related environments.

• Offer expertise across various technologies including Azure Entra ID, Microsoft Active Directory (AD), Active Directory Lightweight Directory Services (ADLDS), Active Directory Federated Services (ADFS), SailPoint, CyberArk, Okta, BeyondTrust, and Public Key Infrastructure (PKI) as key technologies.

⛳️ Requirements

• Bachelor's Degree.

• A college degree or at least 7 years of related experience and/or training; or a combination of education and experience is required.

• 7-10 years of professional experience in the Information Security field and within the discipline is required.

• 7-10 years of advanced information security knowledge in areas such as enterprise endpoint security products (e.g., McAfee e-Policy Orchestrator, Virus Scan, Anti-Spyware, Host Data Loss Protection, Endpoint Encryption), Security Information and Event Manager (SIEM), and network security products (e.g., Palo Alto, Checkpoint, Juniper, McAfee, Cisco, Blue Coat, Imperva) is required.

• 5+ years of experience as a senior level IDAM engineer is preferred.

• 5+ years of engineering experience with SailPoint is required.

• Prior SailPoint deployment experience in a production environment is preferred.

• Experience in writing scripts using Java, PowerShell, etc., is preferred.

• Familiarity with AWS/GCP cloud environments is a bonus.

• Knowledge and experience with Identity Management technologies such as SSO, SCIM, OAuth, SAML, Encryption, and PKI are essential.

• Strong verbal and written communication skills are required.

• A solid understanding of how Role Based Access Control (RBAC) functions in large, distributed environments is necessary.

• A strong grasp of cybersecurity principles and best practices is essential.

• Excellent problem-solving and analytical skills are needed.

• Experience with PAM systems is beneficial.

• Familiarity with MFA protocols and techniques is required.

• Preferred certifications include GIAC, CISSP, CCSE, CISA, HBSS, NSA, CEH, Cisco Security, Security +, or other security certifications.

• Preferred certifications also include CCNA, CCDA, CCSA, CCIE, CISSP, CEH, or MCSE.

• Microsoft technical certifications are preferred.

🏝️ Benefits

• Work/life balance.

• Access to professional training resources.

• Opportunities for creative problem-solving and tackling unique, complex projects.

• Volunteer opportunities.

• The “Optiv Chips In” program encourages employees to volunteer and engage with their teams and communities.

• The necessary technology and ability to work productively from home/remotely (where applicable).