IT Security Operations (6152-1)

Tri-Force Consulting Services, Inc.•New York, NY

1d•Onsite

About The Position

The Cybersecurity IAM Engineer / SailPoint IdentityIQ and Identity Security Cloud Developer & Architect designs, engineers, and modernizes enterprise identity governance capabilities across hybrid cloud and on-premises environments. The role combines SailPoint IdentityIQ and Identity Security Cloud development with IAM architecture leadership, including lifecycle automation, integrations, governance frameworks, and ServiceNow workflow orchestration. It serves as a technical authority for identity lifecycle, access governance, directory integrations, and SailPoint platform architecture, supporting secure, scalable, and compliant IAM operations aligned with Zero Trust principles. The role develops, administers, and maintains SailPoint IIQ and ISC solutions; builds workflows, connectors, and application onboarding; supports Microsoft Entra ID and privileged identity management; integrates IAM systems with cloud platforms; and implements Okta solutions, particularly for Citizen IAM and external identities. The position also supports an upcoming migration from IIQ to ISC. The engineer develops IIQ rules, workflows, lifecycle logic, connectors, aggregation and reconciliation jobs, provisioning adapters, application onboarding frameworks, entitlement schemas, and role models. The role implements certification campaigns, policy enforcement, segregation-of-duties controls, and governance reporting, and extends IIQ using Java, REST APIs, SCIM, and custom UI components. The position defines end-to-end IAM architecture and identity lifecycle frameworks; designs SailPoint and ServiceNow integrations; establishes RBAC/ABAC frameworks, role-mining strategies, and access-modeling standards; and creates architecture diagrams, data-flow maps, and governance models. It also leads design reviews, threat modeling, and IAM roadmap planning with cybersecurity leadership. The engineer integrates identity systems with directories, HR systems, cloud applications, and ServiceNow; designs authentication and federation patterns; and maintains identity data quality. The role supports ServiceNow IAM workflows and orchestration, security and compliance controls, production operations, troubleshooting, patching, upgrades, performance tuning, and technical documentation. The position is an on-site, 12-month role in New York.

Requirements

5–9 years of IAM engineering experience.
5–10+ years of SailPoint IdentityIQ development experience.
Strong proficiency in Java, BeanShell, XML, JSON, SQL, and REST API development.
Deep understanding of the IIQ object model, connector frameworks, workflow engine, and plugin architecture.
Hands-on experience architecting integrations between SailPoint IIQ and ServiceNow.
Strong knowledge of directory services, identity stores, and authentication protocols.
Expertise in identity governance, RBAC/ABAC, segregation of duties, and policy enforcement.
Familiarity with the NIST compliance framework.

Nice To Haves

Expertise in Okta, particularly Citizen IAM and external-user identity needs.

Responsibilities

Design, implement, administer, and maintain SailPoint IdentityIQ and Identity Security Cloud solutions.
Develop and maintain BeanShell rules, custom workflows, lifecycle event logic, task definitions, and plugin modules.
Engineer custom connectors, aggregation jobs, reconciliation logic, provisioning adapters, and application-onboarding frameworks.
Build entitlement schemas and role models; implement certification campaigns, policy enforcement, segregation-of-duties controls, and governance reporting.
Extend IIQ using Java, REST APIs, SCIM, and custom UI components.
Define and maintain end-to-end IAM architecture, including identity sources, directories, governance layers, and provisioning flows.
Design identity lifecycle frameworks for joiner/mover/leaver automation, authoritative-source alignment, and attribute-driven access.
Design and maintain SailPoint and ServiceNow integration patterns and IAM workflows for requests, approvals, provisioning, fulfillment, tickets, incidents, changes, catalog governance, and entitlement mapping.
Establish RBAC/ABAC frameworks, role-mining strategies, and access-modeling standards; create architectural diagrams, data-flow maps, and governance models.
Evaluate IAM modernization opportunities and lead design reviews, threat-modeling sessions, and IAM roadmap planning with cybersecurity leadership.
Integrate SailPoint with Active Directory, LDAP, Azure AD/Entra ID, HR systems, cloud applications, and ServiceNow.
Develop REST/SOAP integrations, SCIM connectors, and custom provisioning logic; implement SAML, OAuth, OIDC, and MFA federation patterns.
Ensure directory hygiene, identity data quality, and lifecycle accuracy across systems.
Administer and support Microsoft Entra ID, including Privileged Identity Management, and integrate IAM with AWS, Azure, or GCP.
Implement and manage Okta solutions, with a focus on Citizen IAM and external-user identity needs.
Conduct code reviews to remove redundancies and optimize system logic; identify and address IAM vulnerabilities early in development.
Collaborate with IT stakeholders, business owners, ServiceNow platform owners, HRIS, infrastructure, and application teams to mature access governance, onboarding, and lifecycle reliability.
Manage and integrate APIs, privileged access management tools, SailPoint Access History, SailPoint Access Modeling, and database platforms.
Test and deploy IAM systems and recommend patches and upgrades; support the migration from IIQ to ISC.
Apply Zero Trust, least privilege, RBAC/ABAC, and governance principles, and engineer controls supporting SOX, HIPAA, ISO 27001, and NIST compliance.
Perform root cause analysis for provisioning failures, connector issues, workflow errors, and performance bottlenecks.
Support production IIQ environments through break/fix, patching, upgrades, and performance tuning.
Maintain technical documentation, architectural diagrams, and operational runbooks.