SailPoint Tech Lead

Guardian Life Insurance•Holmdel Township, NJ

5d•$99,150 - $162,885

About The Position

The SailPoint Tech Lead designs, develops, tests, implements, maintains, and supports identity and access management (IAM) solutions that help secure and improve the efficiency of the organization's IT infrastructure. Working with multiple groups, this role identifies IAM needs and provides guidance on standard methodologies and solutions. The position serves as a subject matter expert in IAM and leads technical work and projects involving SailPoint IdentityIQ, automation, integrations, connectors, and end-user self-service capabilities. It also supports risk and compliance requirements, audits, and operational improvements. After-hours, weekend, and disaster recovery support may be needed. The stated base salary range is $99,150 to $162,885. The final salary depends on the successful candidate's education, experience, knowledge, and abilities. The role may also be eligible for annual, sales, or other incentive compensation. Guardian describes professional development, leadership development, philanthropic opportunities, and flexible and inclusive benefits and resources; benefits apply to eligible full-time employees.

Requirements

At least 5 years of hands-on experience with SailPoint IdentityIQ platform features and functionality.
Hands-on scripting or development experience in at least one of Java, JavaScript, PowerShell, BeanShell, Python, or Visual Basic.
Hands-on experience integrating SailPoint with third-party SaaS/PaaS systems and developing custom forms, workflows, quicklinks, and reports, as well as improving entitlement-review processes.
Hands-on experience with Webservice API, SCIM, JDBC, Delimited Feed File, and SFTP connectors.
Hands-on experience with SailPoint infrastructure, upgrades, and performance tuning.
Knowledge of databases including MSSQL, MySQL, Aurora RDS/EC2 Postgres, Oracle, and DB2.
Knowledge of Windows, Linux, Unix, and RACF Mainframe platforms.
Understanding of security risk, mitigating controls, and compliance standards including SOX, SOC, MAR, and NYDFS.
Knowledge of entitlement reviews, native changes, offboarding, onboarding, transfers, and advanced separation-of-duties configuration.
Knowledge of Active Directory, Entra ID, Okta, and LDAP directories.
Experience developing and continually improving processes, procedures, and controls.
Ability to work proactively and independently on multiple projects or activities with minimal oversight.
Customer focus and ability to support a positive customer-service climate.
Experience working with IT engineers to solve problems, think critically, and design and implement solutions.
Strong written and verbal communication skills, including the ability to synthesize information.
Experience with DevOps, CI/CD, and AWS.
Experience with AI Control Plane and Non-Human Identities (NHI).
Strong knowledge of IAM concepts, technologies, and standard processes.
Experience with AWS IAM and Identity Center.
Experience with IAM platforms including Okta, PingFederate, SailPoint, CyberArk, and Microsoft Azure AD/Entra ID.
Experience with reverse proxy solutions, including Okta Access Gateway and Microsoft App Proxy.
Interest in ongoing learning of new concepts and technical capabilities.
Must be legally authorized to work in the United States without current or future employer visa sponsorship.

Responsibilities

Design, develop, test, implement, maintain, and support IAM solutions.
Serve as a subject matter expert for the Identity and Access Management domain.
Design, develop, and implement technical solutions that support the IAM strategy and meet risk and compliance regulations.
Develop and maintain technical documentation, diagrams, and visual workflows.
Lead IAM projects, delivering automation, integrations, connectors, and self-service capabilities, and building dashboards and reporting.
Communicate technical information clearly to people at all levels of the organization, including business audiences.
Manage priorities and deliverables in partnership with cross-functional teams and third-party vendors.
Support internal and external audits and risk assessments.
Contribute to continuous improvement, security process engineering, and operational excellence.
Provide after-hours, weekend, and disaster recovery support as needed.