Cybersecurity IAM Engineer (SailPoint IdentityIQ & Identity Security Cloud)

Quick Facts

• Role: Cybersecurity IAM Engineer (SailPoint IdentityIQ & Identity Security Cloud Developer/Architect)

• Work location: Onsite (2 Broadway - MTA Headquarters) with option to telecommute up to 2 days/week

• Duration: 12 months

Description

Design, engineer, and modernize enterprise identity governance and IAM lifecycle automation across hybrid cloud and on-prem environments. Blend deep SailPoint IdentityIQ and Identity Security Cloud development with IAM architecture leadership, including integration patterns, governance frameworks, and ServiceNow workflow orchestration aligned with Zero Trust. Serve as a technical authority for identity lifecycle, access governance, directory integrations, and SailPoint platform architecture to ensure secure, scalable, and compliant IAM operations.

Responsibilities

• Design, implement, and maintain SailPoint IIQ and ISC solutions

• Develop and automate workflows, connectors, and application onboarding

• Administer and support Microsoft Entra ID (Azure AD), including Privileged Identity Management (PIM)

• Integrate IAM systems with AWS, Azure, or Google Cloud Platform

• Implement and manage Okta solutions with a focus on Citizen IAM and external user identity needs

• Perform code reviews to eliminate redundancies and optimize logic

• Identify and address IAM vulnerabilities early in development

• Collaborate with IT stakeholders and business owners to mature RBAC and application onboarding programs

• Manage and integrate APIs, PAM tools, SailPoint Access History, SailPoint Access Modeling, and database platforms

• Test, deploy, and recommend patches and upgrades for IAM systems

• Lead migration from IIQ to ISC for an upcoming project

Requirements

• 5–9 years in IAM engineering, including 5–10+ years of SailPoint IdentityIQ development

• Strong proficiency in Java, BeanShell, XML, JSON, SQL, and REST API development

• Deep understanding of the IIQ object model, connector frameworks, workflow engine, and plugin architecture

• Hands-on experience architecting integrations between SailPoint IIQ and ServiceNow

• Strong knowledge of directory services, identity stores, and authentication protocols

• Expertise in identity governance concepts including RBAC/ABAC and SoD, plus familiarity with NIST

Benefits

• Onsite role with option for telecommuting up to 2 days per week