Senior SailPoint ISC Engineer / SME

About the Role

We are looking for a hands-on Senior SailPoint Identity Security Cloud (ISC) Engineer to join the IAM team of a leading Investment Management firm. This is not an IAM administration role — the primary purpose is to serve as the team's internal technical escalation point for production support and advanced troubleshooting. The current team can build solutions but lacks deep ISC expertise when complex production issues arise. The goal is to bring that expertise in-house, reduce dependence on external SailPoint consulting resources, and build long-term operational maturity.

The ideal candidate is a strong 7–8/10 SailPoint ISC practitioner who can independently resolve the majority of production issues and communicate clearly with both technical and business stakeholders.

Key Responsibilities

Production Support & Troubleshooting: serve as the primary technical escalation point for SailPoint ISC production issues; independently diagnose and resolve complex problems using root cause analysis, log analysis, and API debugging; reduce reliance on SailPoint Expert Services by resolving issues in-house.

SailPoint ISC Development: develop and maintain BeanShell scripts, SailPoint Rules, and Transforms; build and enhance governance workflows, lifecycle management processes, and access provisioning flows; troubleshoot and maintain connectors and integrations.

Access Administration: manage access provisioning through individual requests and tickets; handle approvals, exceptions, and day-to-day operational IAM tasks including joiner, mover, and leaver processes; support and enhance certification campaigns.

Stakeholder Collaboration: work independently with cross-functional technical and business teams; lead troubleshooting discussions; communicate clearly on complex technical matters without requiring hand-holding.

Required Qualifications

SailPoint ISC Experience (Mandatory): direct, hands-on SailPoint Identity Security Cloud experience is required; candidates with IdentityIQ (IIQ) experience only will not be considered; a combination of IIQ background plus a minimum of 2–3 years of meaningful ISC experience is acceptable.

Technical Skills: hands-on BeanShell scripting; JSON and REST API development and debugging; SailPoint Rules and Workflow development; connector troubleshooting and configuration; proficiency with Postman, Visual Studio Code, and API testing/debugging tools; log analysis and production troubleshooting experience.

Core ISC Knowledge: identity lifecycle management; access provisioning (including ticket/request-driven provisioning, not just RBAC); certification campaign administration; governance workflows; joiner/mover/leaver processes.

Communication: ability to communicate clearly and independently with both technical and business stakeholders; comfortable leading troubleshooting discussions; strong verbal and written English is a hard requirement.

Nice to Have

Experience in financial services or other highly regulated industries; familiarity with Jira Service Management (JSM); UKG integration experience; Active Directory expertise.