Senior SailPoint Administrator

Blue Cross Blue Shield of Minnesota•Eagan, MN

1d•Hybrid

About The Position

Blue Cross and Blue Shield of Minnesota is hiring a Senior SailPoint Administrator to administer, support, optimize, and govern the organization’s Identity and Access Management (IAM) platform, primarily SailPoint Identity Security Cloud (ISC) or IdentityIQ (IIQ). The position serves as a technical leader for identity governance, access certifications, lifecycle management, role management, and compliance initiatives. It partners with Cybersecurity, Infrastructure, Application Owners, HR, Audit, and business stakeholders to support secure, compliant, and efficient identity and access management processes. The role also involves analyzing project requirements and feasibility, developing integration and implementation frameworks, supporting secure and recoverable infrastructure, advising on enterprise infrastructure needs, evaluating vendor solutions, overseeing contractor and vendor work, and contributing to enterprise installations, upgrades, and process changes. It may include project execution and resource-allocation accountability, systems support outside normal business hours through an on-call rotation, and work direction or mentoring for assigned employees.

Requirements

At least 5 years of related information technology professional experience.
Bachelor’s degree, or an additional two years of relevant experience beyond the stated qualifications in lieu of a degree.
Strong communication skills, including explaining complex topics clearly, listening to anticipate stakeholder needs, and aligning stakeholders to support informed decisions.
Ability to analyze complex information, evaluate options, and work cross-functionally to resolve issues and prevent recurrence.
Ability to organize work, balance competing priorities, and manage time across complex assignments and deadlines.
Broad knowledge of systems, infrastructure, and engineering concepts, with an understanding of business and industry context.
Proficiency with cloud platforms and modern infrastructure, applying scalable and secure solutions.
Knowledge of modern engineering practices, including programming, APIs, data, and CI/CD, within agile or DevOps environments.
Knowledge of engineering standards and delivery practices that support quality, security, and compliance.

Nice To Haves

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or equivalent experience.
At least 5 years of Identity and Access Management experience.
At least 3 years of hands-on SailPoint administration experience with Identity Security Cloud and/or IdentityIQ.
SailPoint IdentityIQ Engineer Certification or SailPoint Identity Security Cloud Certification.
Experience with CyberArk, Okta, Microsoft Entra ID, or other IAM platforms.
Demonstrated expertise with PowerShell, Java, BeanShell, SQL, REST APIs, or other automation technologies.
Familiarity with identity lifecycle management, access governance, and certification processes.
Experience supporting audit, compliance, and regulatory requirements.
Knowledge of NIST, SOX, HIPAA, PCI, or other regulatory frameworks.
Experience in healthcare, insurance, financial services, or another highly regulated environment.

Responsibilities

Administer, configure, maintain, and support the SailPoint platform, including Identity Profiles, Access Profiles, Roles, Policies, Lifecycle Event triggers, provisioning rules, and correlation rules.
Configure and support provisioning workflows, approval chains, and automated Joiner–Mover–Leaver lifecycle events.
Maintain identity attribute mappings, correlation logic, and authoritative-source data quality.
Monitor SailPoint system health and performance, maintain lifecycle and KPI dashboards, and document configurations and operational procedures.
Troubleshoot SailPoint application, connector, and provisioning issues; coordinate platform upgrades, patches, and enhancements.
Support and improve identity governance and administration capabilities, including access certifications, attestations, segregation of duties, policy enforcement, role-based access control, access reviews, and remediation.
Ensure compliance with regulatory and internal security requirements and support least-privilege and zero-trust principles.
Design, configure, and support SailPoint integrations with enterprise systems; onboard applications, harvest entitlements, configure connectors, and test integrations.
Collaborate with development teams to automate identity processes and workflows and improve operational efficiency.
Partner with Information Security and Audit teams on compliance initiatives, audit requests, privileged access monitoring, and resolution of identity-related security findings and risks.
Serve as a technical subject matter expert for SailPoint and identity governance; mentor junior administrators and analysts and provide guidance on IAM best practices.
Participate in IAM strategy, roadmap development, modernization initiatives, IAM projects, and platform enhancements.
Analyze customer requirements and project feasibility, including cost, timing, and compatibility with existing systems and hardware.
Develop and document frameworks for integration and implementation of technical-standard changes.
Develop infrastructure interactions that support system security, stability, recoverability, and access to systems and information.
Advise on enterprise infrastructure growth requirements, capabilities, constraints, and long-term operating standards.
Participate in RFP processes to evaluate and select vendors and oversee contractor and vendor work for quality.
Participate in or lead cross-functional enterprise installations, upgrades, and process changes; may be accountable for project execution and resource allocation.
Create and maintain detailed technical documentation and diagrams and facilitate knowledge sharing.
Track industry trends and maintain knowledge of technologies relevant to enterprise architecture.
Perform systems support, potentially including an on-call rotation outside normal business hours.
Participate in architecture, change, risk, resiliency, incident, problem, CMDB, and asset-management processes.
Assist the manager with work direction, daily work-status monitoring, role clarification, coaching, resource allocation, feedback, and recognition recommendations for assigned employees.
Perform additional responsibilities consistent with the role’s scope and level, as assigned.