Cybersecurity IAM Engineer / SailPoint IdentityIQ and Identity Security Cloud Developer & Architect

Role: Cybersecurity IAM Engineer / SailPoint IdentityIQ and Identity Security Cloud Developer & Architect Work Location: 2 Broadway - MTA Headquarters Duration: 12 Months Need locals to New York . Who can do In Person Interview

Job Description: ONSITE POSITION with option for telecommuting no more then 2 days per week.

The Cybersecurity IAM Engineer / SailPoint IdentityIQ and Identity Security Cloud Developer & Architect is responsible for designing, engineering, and modernizing enterprise identity governance capabilities across hybrid cloud and on prem environments. This role blends deep SailPoint IdentityIQ and Identity Security Cloud development with IAM architecture leadership, including lifecycle automation, integration patterns, governance frameworks, and ServiceNow workflow orchestration.

The engineer will serve as a technical authority for identity lifecycle, access governance, directory integrations, and SailPoint platform architecture ensuring secure, scalable, and compliant IAM operations aligned with Zero Trust principles.

SailPoint IIQ and ISC Developer/Administrator with Okta and Citizen IAM We’re looking for a talented SailPoint IIQ and ISC Developer/Administrator to join our team. You’ll play a key role in developing, administering, and maintaining our identity and access management (IAM) solutions, ensuring secure and efficient access across our organization. Expertise in Okta and Citizen IAM initiatives is a strong plus.

Technical Expertise

• 5 9 years in IAM engineering, with 5 10+ years of SailPoint IdentityIQ development.
• Strong proficiency in Java, BeanShell, XML, JSON, SQL, and REST API development.
• Deep understanding of IIQ object model, connector frameworks, workflow engine, and plugin architecture.
• Hands on experience architecting integrations between SailPoint IIQ and ServiceNow.
• Strong knowledge of directory services, identity stores, and authentication protocols. Security & Governance
• Expertise in identity governance concepts, RBAC/ABAC, SoD, and policy enforcement.
• Familiarity with compliance frameworks (NIST)

Responsibilities

• Design, implement, and maintain SailPoint IIQ and ISC solutions
• Develop and automate workflows, connectors, and application onboarding
• Administer and support Microsoft Entra ID (Azure AD), including Privileged Identity Management (PIM)
• Integrate IAM systems with cloud platforms such as AWS, Azure, or GCP
• Implement and manage Okta solutions, with a focus on Citizen IAM and external user identity needs
• Conduct code reviews to eliminate redundancies and optimize system logic
• Identify and address IAM vulnerabilities early in the development process
• Collaborate with IT stakeholders and business owners to mature Role-Based Access Control (RBAC) andapplication onboarding programs
• Manage and integrate APIs, privilege access management (PAM) tools, SailPoint Access History, SailPoint Access Modeling and database platforms
• Test, deploy, and recommend patches and upgrades for IAM systems

• Migration from IIQ to ISC for the upcoming project

• SailPoint IdentityIQ Engineering & Development:
• Develop and maintain BeanShell rules, custom workflows, lifecycle event logic, task definitions, and plugin modules.
• Engineer custom connectors, aggregation jobs, reconciliation logic, and provisioning adapters.
• Build scalable application onboarding frameworks, entitlement schemas, and role models.
• Implement and optimize certification campaigns, policy enforcement, SoD controls, and governance reporting.
• Extend IIQ using Java, REST APIs, SCIM, and custom UI components.
• IAM Architecture & Solution Design:
• Define and maintain end to end IAM architecture, including identity sources, directories, governance layers, and provisioning flows.
• Architect scalable identity lifecycle frameworks supporting joiner/mover/leaver automation, authoritative source alignment, and attribute driven access.
• Design integration patterns between SailPoint IIQ and ServiceNow, including:
• Access request workflows
• Automated ticket creation and closure
• Provisioning orchestration
• Incident and change management alignment
• Catalog item governance and approval routing
• Establish RBAC/ABAC frameworks, role mining strategies, and access modeling standards.
• Create architectural diagrams, data flow maps, and governance models for enterprise IAM programs.
• Evaluate modernization opportunities (e.g., SailPoint Saa…