Software Engineer – SailPoint IdentityIQ (IAM) Specialist

About the role

We are looking for a Staff Software Engineer who will be the technical expert for SailPoint IdentityIQ within our Identity & Access Management team. You will design, develop and maintain scalable IAM solutions on AWS, mentor junior engineers and ensure secure, reliable identity operations.

Key responsibilities

• Design and develop integrations between IdentityIQ and platform/applications, including custom rules, workflows, forms, connectors and reports.
• Write complex BeanShell or JavaScript code for rule logic, provisioning tasks and identity transformations.
• Deploy, manage and monitor IdentityIQ on AWS (EC2, containers, serverless) using Infrastructure as Code tools such as Terraform.
• Implement monitoring, alerting, logging and telemetry using AWS native services (CloudWatch, CloudTrail) and third‑party tools.
• Establish processes for upgrades, patching, backups and disaster recovery for IdentityIQ in AWS.
• Enforce identity governance policies (separation of duties, role‑based access, least privilege) and design certification campaigns, access reviews and attestation workflows.
• Collaborate with architects, security and GRC teams to ensure compliance with audit requirements.
• Guide and mentor mid‑level and junior engineers, conduct code and design reviews, and drive CI/CD and testing improvements.

Required profile

• Proven experience with SailPoint IdentityIQ implementation and customization.
• Strong knowledge of AWS services and infrastructure‑as‑code (Terraform).
• Hands‑on experience with Java, BeanShell and JavaScript programming.
• Experience in identity governance, access reviews and compliance.
• Ability to mentor and lead junior engineers.

Required skills

• SailPoint IdentityIQ
• AWS (EC2, containers, serverless, CloudWatch, CloudTrail)
• Terraform
• Java
• BeanShell
• JavaScript
• CI/CD pipelines
• Monitoring and logging tools
• Identity governance (SOD, RBAC, least privilege)