SailPoint Support Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the daily administration, configuration, and support of the SailPoint platform.

• Manage identity lifecycle, roles, access certifications, and provisioning workflows.

• Diagnose and resolve ICAM incidents, service requests, and issues within SLAs.

• Configure and maintain features of SailPoint ISC or IIQ, including RBAC, SoD policies, and automated provisioning/deprovisioning.

• Integrate SailPoint with enterprise applications, directories, and third-party services utilizing REST APIs, SCIM, and connector frameworks.

• Assist with the onboarding and offboarding processes for users, roles, and applications.

• Monitor system health, analyze logs, and proactively resolve issues.

• Collaborate with security and compliance teams to fulfill NIST and Zero Trust requirements.

• Maintain technical documentation, standard operating procedures (SOPs), and runbooks.

• Engage in change management activities, including planning, testing, and implementation.

• Aid in audits and compliance reviews by generating access reports and certification campaigns.

• Assess and implement new SailPoint features that align with mission requirements.

• Provide Tier 2/Tier 3 support for escalated identity governance and access management challenges.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field from an accredited institution; equivalent professional experience may be accepted in lieu of a degree.

• Over 3 years of practical experience in administering and supporting SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud (ISC), or a similar Identity Governance and Administration (IGA) platform.

• Active Secret Clearance is mandatory.

• Relevant SailPoint certification(s) are required.

• Excellent communication skills in English, both written and verbal.

• Practical experience with SailPoint, encompassing identity lifecycle management, access certifications, role management, provisioning workflows, and SoD policy enforcement.

• Strong grasp of IGA concepts, including joiner/mover/leaver processes, RBAC, and entitlement management.

• Experience with integrating SailPoint with Active Directory, LDAP, and enterprise applications through native connectors or REST/SCIM APIs.

• Familiarity with ICAM frameworks and federal identity management standards, including NIST SP 800-63 and FICAM.

• Experience supporting users and applications in a ticketing/ITSM environment such as ServiceNow or Jira.

• Proficient in analyzing and interpreting system logs.

• Knowledge of RBAC and ABAC models and their implementation within SailPoint.

• Understanding of Zero Trust Architecture principles.

• Capability to create and maintain technical documentation, SOPs, and runbooks.

• Ability to work both independently and collaboratively.

• Desired: Experience in federal government IT supporting ICAM programs.

• Desired: SailPoint Architect certification.

• Desired: Proficiency in SailPoint BeanShell/Java scripting.

• Desired: Familiarity with PAM solutions, such as CyberArk or BeyondTrust.

• Desired: Experience with DevSecOps and CI/CD pipeline integration.

• Desired: Knowledge of AWS, Azure, or Google Cloud.

• Desired: Skills in Python or PowerShell scripting.

• Desired: Familiarity with Okta, Ping Identity, or ForgeRock.

• Desired: Knowledge of PIV/CAC authentication.

• Desired: Experience with ATO and SSP.

• Desired: CISSP, Security+, or other cybersecurity certifications.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) retirement plan.

• Paid time off.

• Paid parental leave.

• Life and disability insurance.

• Flexible spending accounts.

• Commuter benefits.

• Tuition reimbursement.