Jr. Sailpoint Engineer

Fabletics•California, CA

2d•$80,000 - $100,000•Remote

About The Position

Fabletics is currently looking for a Jr. SailPoint Engineer. This role offers an exciting opportunity to support the Identity Governance team with day-to-day SailPoint Identity Security Cloud / IdentityNow administration, application onboarding, lifecycle automation, and operational support for MyAccess. The Jr. SailPoint Engineer will work closely with IT Operations, Service Desk, HRIS/Workday, Security, and business stakeholders to keep identity processes reliable, auditable, and scalable. This role reports directly to the Identity Governance Manager. The Jr. SailPoint Engineer plays a hands-on role in maintaining and improving Fabletics’ Identity & Access Management program. You will assist with configuring and troubleshooting SailPoint, supporting onboarding and offboarding automation, and helping keep application access clean, auditable, and properly governed. This is an excellent growth role for someone with a strong technical foundation who is eager to build deep expertise in Identity Governance and IAM.

Requirements

2–3 years of experience in IT Security, IAM, Service Desk, enterprise application administration, or a related technical support role.
Basic understanding of Identity & Access Management concepts including users, groups, roles, entitlements, access requests, approvals, provisioning, deprovisioning, and certifications.
Familiarity with Active Directory and Azure / Microsoft Entra ID.
Ability to troubleshoot user access issues, group membership issues, account status issues, and provisioning failures.
Strong attention to detail and ability to follow structured processes.
Comfortable working with tickets, documentation, checklists, test cases, and status updates.
Good communication skills with both technical and non-technical stakeholders.
Willingness to learn SailPoint Identity Security Cloud / IdentityNow, Workday-driven identity processes, SCIM, REST APIs, and workflow automation.
Ideal candidate brings foundational AI literacy, including experience using generative AI tools, and a proactive mindset to experiment with new technologies to drive productivity and innovation.

Nice To Haves

Exposure to SailPoint IdentityNow / Identity Security Cloud, workflows, access profiles, roles, sources, or certifications.
Experience with Workday as an authoritative identity source and/or Microsoft Teams workflow-based approvals.
Familiarity with ITSM tools such as Freshservice, Jira, or Microsoft Planner.
Basic understanding of SCIM, REST APIs, JSON, or workflow automation concepts.
Experience supporting SOX, audit evidence, access reviews, or compliance-related tasks.

Responsibilities

Support daily administration of the SailPoint Identity Security Cloud / IdentityNow platform (MyAccess), including configuration and maintenance of applications, sources, access profiles, roles, governance groups, owners, and approvers.
Troubleshoot access request issues, approval routing failures, provisioning errors, aggregation problems, and correlation gaps.
Monitor SailPoint workflows, source aggregation jobs, and exception queues; support sandbox testing, production validation, and release documentation.
Assist with onboarding and offboarding processes for FTEs, retail users, contractors, and rehires, including identity lifecycle state logic and Workday-driven identity changes.
Ensure accurate downstream provisioning and deprovisioning to Active Directory, Azure / Entra ID, and other connected applications; monitor termination automation and post-termination access cleanup.
Support retail automation flows including birthright access, group assignments, and promotion/demotion scenarios.
Configure and maintain approval processes and routing logic for applications, access profiles, roles, and access requests; resolve stuck approvals, missing approvers, and escalation workflows.
Assist with onboarding new applications into MyAccess, including owners, approvers, access profiles, entitlement mapping, and provisioning rules across various integration methods.
Help with source configuration, aggregation testing, account correlation, and entitlement cleanup.
Monitor uncorrelated, orphaned, and duplicate accounts, stale access, and source mismatches; document findings and remediation steps.
Assist with SOX-related access reviews, evidence collection, certification campaigns, and cleanup of invalid access profiles, missing owners, and inactive approvers.
Create and maintain documentation, runbooks, and troubleshooting guides for MyAccess processes; assist with ticket tracking and operational reporting.
Collaborate with business users, application owners, HRIS, Security, IT Operations, Service Desk, and Retail IT to translate access requirements into SailPoint configuration.