IAM Integration Engineer

Shree Narayani Networking Solutions•Minneapolis, MN

8d•Hybrid

About The Position

The IAM Integration Engineer designs, develops, and delivers integrations for securely onboarding connected applications and managing their identities throughout the lifecycle within the enterprise IAM ecosystem. The role emphasizes hands-on SailPoint IdentityIQ connector engineering, aggregation pipelines, provisioning workflows, plugin and rule development, and enterprise data transformations that support onboarding automation. The engineer collaborates with IAM engineering and integration teams, application teams, and security and compliance stakeholders to deliver reliable, audit-ready identity services that meet regulatory and operational standards. The position is a two-year contract, hybrid in Minneapolis, Minnesota or Irving, Texas, with three days onsite. The posting requests local candidates; candidates with a history of relocation may be considered for some roles because most final-round interviews are face-to-face and onsite. Candidates must be able to work directly on the vendor's payroll; any visa status is accepted, including H-1B transfers.

Requirements

4–7+ years of experience in IAM/IGA engineering roles.
Hands-on experience with SailPoint IdentityIQ.
Strong Java engineering background, including JDK 8+ and development of plugins, rules, and JARs.
Proficiency with SQL Server and/or Oracle and advanced understanding of relational identity data structures.
Expertise in REST/SOAP APIs, schema mapping, ETL-like transformations, and integration pipelines.
Familiarity with IGA object models and identity data constructs, including accounts, entitlements, roles, and policies.
Solid understanding of identity lifecycle management, provisioning and deprovisioning, and governance workflows.
Experience applying IAM controls such as segregation of duties, recertification, audit trails, and privileged access standards.
Knowledge of authentication and directory technologies, including AD/LDAP, cloud identity providers, SCIM, and SSO/MFA patterns.
Experience with Git-based CI/CD workflows, environment promotion, and release governance.
Strong testing discipline across unit, integration, and functional testing.
Ability to build reusable, scalable integration frameworks and follow secure coding practices.
Excellent communication and documentation skills.
Ability to lead discussions with technical and non-technical users.
Strong analytical problem-solving skills and accountability for quality and reliability.
Must be able to work directly on the vendor's payroll; the posting accepts any visa status, including H-1B transfers.
The posting requests local candidates; candidates with a history of relocation may be considered for some roles.

Nice To Haves

Experience with cloud-based identity systems such as Azure AD/Entra ID, Okta, Saviynt, or ForgeRock.
Knowledge of Python, PowerShell, or Groovy.
Experience building identity integrations in highly regulated environments.
Background in data engineering or API orchestration.

Responsibilities

Develop and maintain IAM/IGA integration components, primarily for SailPoint IdentityIQ.
Build and tune aggregation connectors using REST, SOAP, JDBC, AD/LDAP, and custom connector patterns.
Implement schema discovery, entitlement modeling, correlation logic, and provisioning policies for identity lifecycle operations.
Develop reusable Java-based rules, plugins, workflows, and JAR modules using SailPoint's object model and coding standards.
Enhance and refactor connectors, resolve defects, and optimize performance.
Design standardized onboarding patterns and templates for schemas, correlation, provisioning, and entitlement modeling.
Implement connector error handling, retry logic, and reconciliation tuning to improve reliability and auditability.
Develop extensible integration frameworks for future connectors, custom endpoints, and reusable provisioning logic.
Build and maintain identity data flows using SQL Server and/or Oracle.
Develop schema mappings, attribute transformations, and normalization rules for account, entitlement, and role data.
Troubleshoot data integrity issues, reconcile inconsistencies, and ensure identity data completeness and accuracy.
Engineer application onboarding automation for metadata ingestion, entitlement cataloging, user-to-entitlement assignment, and lifecycle management.
Build bulk-data workflows with rollback, validation, tracking, and audit evidence.
Create onboarding templates, scripts, and validation utilities to improve application integration efficiency.
Implement Git-based version control, code review, and artifact promotion across DEV, IT, UAT, and PROD environments.
Package, test, and deploy rulesets, workflows, and integration modules in accordance with release governance.
Maintain environment configuration parity and verify deployments during go-live.
Write and execute unit, system integration (SIT), user acceptance (UAT), and production validation tests.
Conduct root-cause analysis and coordinate defect remediation with development, operations, and application teams.
Ensure integration changes meet enterprise quality, reliability, and security expectations.
Apply IAM governance principles, including segregation of duties, auditability, certification processes, and evidence capture.
Ensure integrations meet SOX, SOC, internal audit, and enterprise security standards.
Prepare audit-readiness documentation, including design documents, test evidence, deployment runbooks, and compliance mappings.
Partner with application owners, IAM engineering teams, security architects, and platform administrators to design scalable integrations.
Translate requirements into technical designs and advise on integration patterns and identity best practices.
Conduct knowledge-transfer sessions for operational teams and contribute to shared engineering standards.