Sr. Lead, IGA Engineer - SailPoint ISC

Newell Brands•Atlanta, GA

1d•$136,000 - $187,000•Hybrid

About The Position

We are seeking a seasoned and highly skilled IGA Engineer with deep, hands-on expertise in SailPoint Identity Security Cloud (ISC) to join our Identity & Access Management team. This is a subject matter expert (SME) role, not a generalist position — the successful candidate will have architected, built, and operated SailPoint ISC environments at scale and will be capable of leading complex implementation workstreams independently. The engineer will serve as the technical authority for our IGA platform, driving platform maturity, connector development, transform engineering, and integration across enterprise systems including SAP. This role demands proficiency in both the configuration and development dimensions of SailPoint ISC, including hands-on API/Postman-driven automation, BeanShell/Rule scripting, and transform authoring.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline; equivalent practical experience considered.
Minimum 5–7 years of experience in Identity Governance & Administration with at least 3 years focused exclusively on SailPoint ISC (IdentityNow).
Demonstrable SME-level experience across the SailPoint ISC platform: sources, provisioning, certifications, roles, transforms, and rules — not limited to configuration.
Strong track record of delivering end-to-end IGA implementations, including complex multi-source environments at enterprise scale.
Proven experience authoring and testing transforms using the SailPoint ISC REST API and Postman (collections, environments, automated test scripts).
Hands-on experience with SailPoint ISC Connector SDK and custom connector development.
Deep experience integrating SailPoint ISC with complex enterprise applications, including SAP and other widely used business platforms — supporting both read and provisioning use cases.
Experience managing joiner/mover/leaver lifecycle automation, birthright access, SoD enforcement, and LPA initiatives in ISC.
Use scripting and development skills to automate tasks, improve data quality, support integrations, and resolve platform issues.
SailPoint ISC: sources, access profiles, roles, transforms, provisioning plans, policies, certifications, workflows (ISC Workflow Engine), and VA management.
SailPoint ISC REST API: proficient use via Postman for transforms, source schema management, account aggregation triggering, and platform automation.
Connector types: SaaS Connectivity, JDBC, Web Services, Flat File, PowerShell, SCIM, and Direct Connect.
SAP IAM: SoD-aware role design, GRC AC integration, S/4HANA connector configuration.
Directory services: Active Directory, Entra ID (Azure AD), LDAP.
Identity standards: SCIM 2.0, OAuth 2.0, SAML 2.0, OpenID Connect.
Familiarity with SailPoint NERM and ARM modules.
Understanding of CI/CD practices as they relate to IGA configuration

Nice To Haves

SailPoint Certified IdentityNow Engineer or SailPoint Certified IdentityNow Architect credential.
Experience with SailPoint ISC Workflows (the native workflow engine) for advanced lifecycle event automation.
Exposure to SailPoint AI-driven access recommendations and Role Discovery features.
Experience contributing to or reviewing SailPoint Compass community knowledge articles or connector contributions.
Background in broader PAM/IAM tooling (e.g., CyberArk, BeyondTrust, Okta) complementing an IGA-first skill set.
Familiarity with Agile/Scrum delivery methodologies within a security or IAM programme context.
Experience in a manufacturing, retail, or consumer goods regulated environment.

Responsibilities

Serve as the SailPoint ISC platform SME, owning architecture decisions, platform roadmap contributions, and technical standards.
Design, build, and optimize ISC configurations including source onboarding, provisioning policies, role modelling, and access profiles.
Architect and implement entitlement management, separation of duties (SoD) controls, and least-privilege access (LPA) frameworks.
Lead the design and delivery of joiner/mover/leaver (JML) lifecycle workflows and birthright access provisioning.
Evaluate and implement SailPoint NERM (Non-Employee Risk Management) and ARM (Access Risk Management) capabilities.
Develop, configure, and maintain connectors for SAP (HCM, ECC, GRC, S/4HANA, Ariba, Concur), Salesforce, IBMi, and other enterprise systems.
Build and maintain SailPoint ISC SaaS Connectivity connectors using the Connector SDK and REST-based custom connectors.
Design and implement Virtual Appliance (VA) configurations and cluster management for on-premises source connectivity.
Integrate ISC with HR systems of record (e.g., Workday, SAP HCM) to drive authoritative source feeds.
Author, test, and maintain SailPoint ISC transforms (Velocity, Seaspray, and rule-based) using Postman and the SailPoint ISC REST API.
Use Postman collections to build, validate, and automate transform testing workflows and connector configuration management.
Write and maintain BeanShell rules for complex provisioning logic, correlation, and identity attribute manipulation.
Design, configure, and manage access certification campaigns including user access reviews (UAR), entitlement reviews, and role reviews.
Maintain RBAC and ABAC frameworks, including role mining, role composition, and automated access assignment policies.
Support audit and compliance activities related to SOX, GDPR, and internal IAM policy requirements.
Partner with GRC and audit teams to ensure access controls meet regulatory and internal policy standards.
Produce and maintain platform documentation, runbooks, and governance artefacts for audit readiness.
Act as the IGA technical escalation point for the broader IAM team, resolving complex platform and integration issues.
Collaborate with application owners, HR, Legal, and security teams to gather requirements and deliver IGA solutions.
Provide technical mentorship to less experienced IGA engineers and analysts on SailPoint ISC best practices.
Engage with SailPoint Compass community and maintain awareness of platform releases, roadmap changes, and new capabilities.
Participate in after-hours support windows for critical IGA platform incidents where required.