Engineer Sr

TekWissen•Seattle, WA

2d•Onsite

About The Position

Provide hands-on identity operations support for the client’s Microsoft Entra ID and SailPoint Identity Security Cloud (ISC) environments across a hybrid, multi-cloud environment. The role focuses on processing identity lifecycle and access requests, troubleshooting provisioning and synchronization issues, maintaining accurate and timely access, and automating repetitive operational work. It is an operations-focused position rather than an architecture role, with collaboration across Identity Architecture, HR, IT Service Management, application owners, and Security Operations. The engineer will administer SailPoint ISC and Microsoft Entra ID, support application access and hybrid identity synchronization, manage access reviews and audit evidence, and perform ongoing account hygiene. They will also build and maintain production-quality automation using PowerShell, Microsoft Graph, Python, SailPoint APIs, and workflow tools. The role includes documenting repeatable procedures, serving as an escalation point, improving identity processes with partner teams, and participating in identity-related incident response and after-hours coverage as needed.

Requirements

Bachelor's or master's degree in Computer Science, Cybersecurity, Information Technology, or equivalent education and experience.
At least 3 years of experience in identity and access management, IAM operations, or systems/security engineering, including hands-on joiner/mover/leaver work.
Hands-on experience with Microsoft Entra ID administration, including users, groups, and applications; working knowledge of Conditional Access, PIM, and Entra ID Governance features.
Hands-on experience operating an enterprise IGA platform, including access requests, provisioning, source connectors, and troubleshooting provisioning failures; SailPoint ISC / IdentityNow preferred, with comparable IGA tools considered.
PowerShell and Microsoft Graph API / Graph PowerShell SDK scripting and automation skills.
Working knowledge of SAML, OAuth 2.0, OIDC, and SCIM sufficient to troubleshoot SSO and provisioning issues.
Experience with hybrid identity, including on-premises Active Directory and Entra Connect / Cloud Sync, and troubleshooting synchronization and attribute issues.
Experience working in an ITSM ticketing environment, managing queues against SLAs, and documenting work to audit standards.
Strong troubleshooting and problem-solving skills, attention to detail, and clear communication with technical and non-technical partners.

Nice To Haves

Microsoft SC-300, SailPoint ISC, AZ-500, Security+, or CISSP certification.
Python and REST API integration experience.
Experience building ITSM-integrated automation, such as ServiceNow-to-SailPoint or Entra fulfillment workflows.
Experience with low-code/no-code automation such as Power Automate or Logic Apps, and infrastructure-as-code or configuration-as-code such as Terraform or Bicep.
Familiarity with HRIS-driven provisioning, such as Workday, and source-of-truth data quality issues.
Familiarity with privileged access management tools such as BeyondTrust and how PAM and PIM complement each other.
Experience supporting SOX or PCI access-control audits and evidence collection.
Exposure to identity threat detection and response (ITDR) and feeding identity signals into SIEM/SOAR.
Experience in large-scale retail, ecommerce, or another high-transaction enterprise.

Responsibilities

Fulfill and resolve joiner, mover, and leaver requests from the ITSM queue within SLA, including account creation, access assignment and changes, and timely deprovisioning.
Operate SailPoint ISC by processing access requests, troubleshooting provisioning failures, monitoring aggregations and identity refreshes, correcting identity attributes and source-data issues, and managing roles and access profiles.
Administer Microsoft Entra ID users, groups, licenses, enterprise application roles, guest accounts, Lifecycle Workflows, and Entitlement Management access package requests.
Troubleshoot HR-to-identity provisioning and hybrid synchronization issues, including attribute mismatches, duplicate or conflicting accounts, and Entra Connect or Cloud Sync errors.
Handle privileged and elevated access requests, including PIM eligible assignments and privileged groups, with required approvals, justification, and audit trails.
Support application access, including SSO assignments, SCIM provisioning troubleshooting, and application and connector onboarding to established patterns.
Operate access certification and access review campaigns, including launch, monitoring, reminders, revocations, and audit evidence production.
Perform account hygiene, including identifying orphaned, dormant, and stale accounts, cleaning up guests, maintaining service account inventories, and reconciling Entra, SailPoint, and Active Directory.
Build and maintain lifecycle and access-task automation using PowerShell, Microsoft Graph, Python, SailPoint ISC APIs, workflows, and rules.
Create event-driven and scheduled workflows using tools such as Azure Automation, Logic Apps, Power Automate, or Azure Functions, including ITSM ticket integration.
Analyze ticket volume, SLA performance, and recurring failure patterns to identify automation opportunities and track results.
Maintain automation as production code through source control, peer review, testing, logging, and error handling.
Use AI tooling to support scripting, log and error analysis, troubleshooting, and documentation.
Write and maintain runbooks, SOPs, and knowledge base articles for consistent identity support.
Serve as an escalation point for service desk and application teams and provide operational findings to Identity Architecture.
Partner with HR/HRIS, IT Service Management, and Security Operations to improve source-data quality, lifecycle timing, and identity signals for threat detection.
Participate in identity-related incident response and escalation coverage, including after-hours support as needed.