Senior Identity Engineer – IIQ/ISC/Zilla

Posted 111ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Sr. Identity Engineer optimizing IAM operations via SailPoint IIQ and Zilla remotely across the U.S. Enhancing identity lifecycle management and ensuring operational efficiency.

Responsibilities:

  • Handle escalations from Tier 1, stabilize and optimize production, and drive small/medium enhancements
  • Keep identity lifecycle, access requests, certifications, and policy enforcement humming—with operational discipline, measurable SLAs, and crisp client communication
  • Build and optimize workflows, transforms, and policies (SoD, RBAC) in Zilla and ISC
  • Monitor and resolve aggregations, account correlations, provisioning failures, and campaign anomalies, tune schedules and thresholds
  • Maintain and troubleshoot Virtual Appliance (VA) health, connector upgrades, and connectivity (e.g., AD/Entra, HRIS, SaaS apps, databases)
  • Build and maintain Workflows (low code), Transforms, policies (SoD, separation of function), and request/catalog items
  • Run monthly health checks and deliver operational reports (KPIs, trendlines, incidents, changes, and risk/compliance signals)
  • Act as escalation for Tier 1: triage, contain, and restore; perform root cause analysis and implement durable fixes
  • Create and improve runbooks/SOPs; automate recurring fixes and checks
  • Plan and execute low-risk changes (connector tuning, attribute mappings, workflow edits, catalog updates) within ITSM guardrails
  • Contribute to release readiness: sandbox validation, UAT coordination, deployment notes, and rollback plans
  • Translate operational signals into clear actions for client IAM owners and app teams
  • Advise on access modeling (Access Profiles vs. Roles), campaign design, and birthright vs. requestable access
  • Provide backlog intake sizing for Tier-3/architecture where code or complex redesigns are required

Requirements:

  • 5+ years of verifiable IAM operations/consulting experience, with at least 1 year hands-on in SailPoint IIQ in production
  • Recent (≤12 months) hands-on experience with SailPoint ISC/IDP and Zilla in production environments
  • Experience with SailPoint ISC, nice to have
  • Proven Tier-2 ownership of aggregations, correlation, provisioning, certifications, workflow/transform tuning, catalog & access model hygiene, and VA/connector health
  • Solid grasp of identity lifecycle (joiner/mover/leaver), request/approval patterns, SoD policy design, and RBAC in large, distributed environments
  • Comfortable with logs, metrics, and MTTR/SLAs; can turn noisy failures into stable automation
  • Strong written/verbal communication—clear incident timelines, executive-level status, and precise change plans
  • Familiarity with Entra ID/AD, HR sources, and common SaaS targets from an IIQ connector perspective
  • SailPoint IIQ (Workflows, Access Requests, Certifications, Identity & Access Profiles, Transforms, Policies, Reports) Virtual Appliances, connector logs, account activity, and provisioning task views
  • ITSM (ServiceNow/Jira), Confluence/knowledge base, basic API tooling (Postman/Curl) for IIQ v3 endpoints
  • Basic scripting for ops automation (PowerShell or Python) and CSV/data fixes where appropriate
  • Okta (governance targets via SCIM/API; SSO basics helpful but not the focus)- nice to have
  • CyberArk governance integration (safe/platform entitlement visibility and request flows)- nice to have
  • Cloud platforms (AWS/GCP) as identity sources/targets- nice to have
  • Security/compliance context: SOC 2, SOX, HIPAA, PCI; evidence packaging for audits- nice to have
  • Certifications (SailPoint, Microsoft, ISC²) are a plus, not a gate

Benefits:

  • A company committed to championing Diversity, Equality, and Inclusion through our Employee Resource Groups
  • Work/life balance
  • Professional training resources
  • Creative problem-solving and the ability to tackle unique, complex projects
  • Volunteer Opportunities
  • “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities
  • The ability and technology necessary to productively work remotely/from home (where applicable)