Senior Identity Governance Engineer

Position: Senior SailPoint Identity Security Cloud (ISC) Engineer Location: On-site in New York City Start date: as soon as possible Compensation: $100,000 - $110,000 with benefits Position Overview We are seeking a hands-on Senior SailPoint Engineer to lead the design, implementation, and support of our enterprise Identity Governance and Administration (IGA) platform. This role will be responsible for architecting, deploying, and maintaining SailPoint Identity Security Cloud (ISC) while partnering closely with Identity, Infrastructure, Security, Cloud, and Application teams to automate identity lifecycle management across the enterprise. This is a highly technical engineering role requiring multiple end-to-end SailPoint ISC implementations in enterprise environments. The ideal candidate will have deep expertise building identity governance solutions, integrating enterprise applications, and automating access management processes within a Microsoft Azure ecosystem. Responsibilities • Design, implement, and maintain SailPoint Identity Security Cloud (ISC) solutions in large enterprise environments. • Lead multiple full lifecycle SailPoint ISC implementations, including architecture, configuration, deployment, migration, and production support. • Build and maintain Joiner, Mover, Leaver (JML) identity lifecycle workflows for automated provisioning and deprovisioning. • Configure and customize SailPoint lifecycle events, workflows, transforms, rules, identity profiles, access profiles, roles, and sources. • Develop and maintain automated provisioning workflows across cloud and on-premises applications. • Design and implement Role-Based Access Control (RBAC) models, entitlement management, birthright access, and role engineering strategies. • Configure and manage access request, approval, and fulfillment workflows. • Design and administer access certification campaigns, periodic access reviews, and Segregation of Duties (SoD) controls. • Develop custom integrations utilizing REST APIs, SCIM, PowerShell, and SailPoint Web Services connectors where required. • Configure and troubleshoot SailPoint connectors, aggregation jobs, provisioning policies, identity mappings, and account correlation. • Integrate SailPoint with enterprise identity providers, HR systems, cloud platforms, and privileged access management solutions. • Partner with Azure, Infrastructure, Security, and Application teams to automate identity governance across hybrid cloud environments. • Support production incidents, perform root cause analysis, and optimize platform performance, scalability, and reliability. • Develop technical documentation, architecture diagrams, implementation guides, and operational runbooks. • Participate in platform upgrades, new feature deployments, testing, and continuous platform improvements. Required Qualifications • 8+ years of Identity and Access Management (IAM) experience. • 5+ years of hands-on SailPoint engineering experience. • Multiple enterprise SailPoint Identity Security Cloud (ISC / IdentityNow) implementations from design through production. • Strong understanding of Identity Governance and Administration (IGA) concepts. • Deep experience with: • Identity Lifecycle Management (Joiner / Mover / Leaver) • Provisioning & Deprovisioning • Access Certifications • Access Requests • Role Modeling / RBAC • Entitlement Management • Identity Profiles • Access Profiles • Lifecycle States • Identity Security Cloud administration • Experience configuring and troubleshooting SailPoint connectors. • Experience developing API-based integrations using REST, SCIM, and PowerShell. More About Your Role This dynamic role requires a collaborative attitude. While you will have specific duties, the entire team is responsible for the final delivery, which may occasionally involve taking on additional tasks outside your primary responsibilities. Adaptability and a willingness to contribute wherever needed are key to success in this environment. Benefits At Biblioso, we are committed to the well-being of our employees and offer a competitive benefits package to support their needs, including: • 401(k) retirement plan • Disability coverage • Employee Assistance Program (EAP) • Life insurance • Health insurance • Paid vacation and sick time • Paid holidays We believe that investing in our team's well-being is essential for the success of our company. Contact: abier@biblioso.com Please note: This role is not open for C2C or any third-party arrangements.