Senior SailPoint IAM Engineer
Natick, ,
Information Technology
Full Time,
$160000 - $200000
On-site
Other/Non Classified
Natick, ,
$160000 - $200000
Full Time,
Other/Non Classified
On-site
Information Technology
Job details
A leading technology organization is looking for a Senior SailPoint IAM Engineer to help strengthen and improve its enterprise identity and access management program. This role focuses on building and maintaining identity governance solutions using SailPoint Identity Security Cloud (ISC), APIs, SCIM, and modern DevOps practices.
This is an opportunity for an experienced IAM professional who enjoys solving complex technical challenges, building scalable solutions, and making identity management more efficient and secure. You’ll help shape how employees gain access to the systems and applications they need, from onboarding and provisioning to access requests, certifications, and ongoing governance.
You’ll work closely with application owners, IT, security, compliance, and business teams to develop reliable integrations, automate processes, and establish consistent access controls across the organization. The role also offers opportunities to take technical ownership, troubleshoot complex issues, mentor other team members, and continuously improve the SailPoint platform.
Required Skills & Experience
-
Bachelor’s degree with 6 years of professional experience, a master’s degree with 3 years of professional experience, a PhD, or equivalent practical experience.
-
Strong experience in enterprise identity and access management, particularly Identity Governance and Administration (IGA).
-
Hands-on expertise with SailPoint Identity Security Cloud (ISC).
-
Experience with identity lifecycle management, application and source onboarding, access requests, provisioning, access certifications, workflows, and governance policies.
-
Proven experience implementing and delivering SailPoint ISC solutions in complex enterprise environments.
Desired Skills & Experience
-
Experience designing identity architectures and managing identity lifecycles, governance, provisioning, and integrations.
-
Familiarity with integrating HR systems, directories, IT service management platforms, and business applications.
-
Knowledge of access control models, including role-based access control (RBAC), attribute-based access control (ABAC), birthright access, segregation of duties, and least privilege.
-
Experience applying DevOps practices to IAM, including source control, CI/CD pipelines, automated testing, and controlled deployments.
-
Understanding of identity data management, identity correlation, entitlement modeling, and policy enforcement.
-
Experience with IAM automation, API-based integrations, and scripting.
-
Familiarity with SAML, OAuth, OpenID Connect (OIDC), SCIM, LDAP, SQL, REST APIs, and Active Directory.
What You’ll Be Doing
-
Design, build, and enhance identity governance solutions using SailPoint ISC.
-
Develop and maintain workflows for identity lifecycle management, access requests, provisioning, certifications, and governance.
-
Create scalable approaches for application onboarding and integration using APIs, SCIM, and modern identity standards.
-
Partner with application owners and business, IT, security, and compliance teams to onboard applications and establish consistent governance practices.
-
Design access control models that balance business needs with security requirements and least-privilege principles.
-
Apply sound engineering practices to platform development and delivery, including CI/CD, version control, automated testing, and release management.
-
Improve platform reliability through automation, monitoring, logging, configuration management, and environment separation.
-
Investigate and resolve complex identity and access issues while supporting audits and compliance requirements.
-
Provide technical guidance and mentorship to other IAM team members.
-
Support the ongoing operation of the SailPoint platform, including incident resolution, production support, upgrades, and continuous improvement.
Technology Breakdown
The role centers on SailPoint ISC and the technologies used to connect identity governance with enterprise systems.
-
Identity Governance: SailPoint Identity Security Cloud (ISC)
-
Integration Technologies: APIs, SCIM, REST
-
Identity Standards: SAML, OAuth, OIDC, LDAP
-
Directories & Enterprise Systems: Active Directory, SQL, HR systems, ITSM platforms
-
Engineering & Automation: CI/CD, source control, automated testing, configuration management, scripting
Day-to-Day Responsibilities
The exact time allocation across responsibilities has not been specified, but the role combines hands-on engineering with technical leadership and cross-functional collaboration.
-
Hands-on SailPoint Engineering: Building, configuring, integrating, and improving identity governance solutions.
-
Technical Leadership: Troubleshooting complex issues, establishing engineering best practices, and mentoring IAM colleagues.
-
Stakeholder Collaboration: Working with application owners, IT, security, compliance, and business teams to deliver secure, effective access management.
-
Platform Operations: Supporting production environments, improving reliability, and driving ongoing automation and operational improvements.
The Offer
-
Medical, Dental, Vision insurance
-
Competitive base pay plus bonus
-
Generous PTO
-
401k plus match
I want more jobs like this in my inbox.
About Kelly
Work changes everything. And at Kelly, we’re obsessed with where it can take you. To us, it’s about more than simply accepting your next job opportunity. It’s the fuel that powers every next step of your life. It’s the ripple effect that changes and improves everything for your family, your community, and the world. Which is why, here at Kelly, we are dedicated to providing you with limitless opportunities to enrich your life—just ask the 300,000 people we employ each year.Kelly is committed to providing equal employment opportunities to all qualified employees and applicants regardless of race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, age, marital status, pregnancy, genetic information, or any other legally protected status, and we take affirmative action to recruit, employ, and advance qualified individuals with disabilities and protected veterans in the workforce. Requests for accommodation related to our application process can be directed to the Kelly Human Resource Knowledge Center. Kelly complies with the requirements of California’s state and local Fair Chance laws. A conviction does not automatically bar individuals from employment. Kelly participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.
Kelly may use AI-powered tools during the recruitment and hiring process. For full details, including how Kelly uses AI, your rights, and how to request a reasonable accommodation, visit the Recruitment Artificial Intelligence Notice.