2 months ago
Chennai, India or Bengaluru, IndiaSenior
Responsibilities
- Design, develop, configure, enhance, and support SailPoint IdentityIQ IAM and IGA solutions.
- Develop and customize IdentityIQ workflows for access requests, approvals, provisioning, deprovisioning, lifecycle events, escalations, exceptions, and manual fulfillment.
- Configure and maintain integrations using SailPoint connectors, JDBC, LDAP, Active Directory, REST, SOAP, flat files, HR systems, and enterprise applications.
- Support application onboarding, including source analysis, account and entitlement schemas, aggregation, identity correlation, manager mapping, provisioning policies, and certification enablement.
- Develop and maintain IdentityIQ rules, including BuildMap, Correlation, Customization, Before Provisioning, After Provisioning, Workflow, Certification, Policy, Validation, and Task rules.
- Configure Lifecycle Manager capabilities, including QuickLinks, access request forms, approval schemes, work items, birthright access, mover logic, and leaver deprovisioning.
- Maintain IdentityIQ applications, identities, attributes, managed attributes, roles, policies, populations, workgroups, email templates, forms, workflows, tasks, and configuration objects.
- Troubleshoot workflows, aggregation tasks, provisioning failures, identity refresh tasks, certification campaigns, policy violations, and connector issues.
- Validate and migrate IdentityIQ XML objects across development, test, UAT, pre-production, and production environments.
- Collaborate with architects, application owners, business users, security teams, testing teams, and operations teams on connector, entitlement, approval, provisioning, certification, and handover requirements.
- Support access certifications, role management, segregation-of-duties controls, audit evidence, compliance reporting, and policy violation handling.
- Prepare technical documentation, configuration guides, test evidence, deployment instructions, troubleshooting procedures, and support handover materials.
Requirements
- At least 7 years of hands-on SailPoint IdentityIQ development, configuration, integration, deployment, and support experience.
- Strong knowledge of IAM and IGA concepts, including identity lifecycle management, access governance, access certification, provisioning, deprovisioning, RBAC, and segregation of duties.
- Experience developing IdentityIQ workflows with Business Process Editor, workflow XML, process variables, approval steps, rules, scripts, subprocesses, forms, and workflow library methods.
- Experience with application onboarding, account and entitlement aggregation, identity and manager correlation, identity refresh, and provisioning configuration.
- Experience developing IdentityIQ rules using Java and BeanShell.
- Experience integrating IdentityIQ with Active Directory, LDAP, JDBC databases, REST APIs, SOAP services, web services, flat files, HR systems, and enterprise applications.
- Working knowledge of provisioning plans, account and attribute requests, entitlement models, managed attributes, roles, policies, populations, workgroups, and access profiles.
- Ability to troubleshoot IdentityIQ issues using logs, task results, workflow cases, debug pages, application configuration, aggregation outputs, and provisioning transaction details.
- Familiarity with IdentityIQ XML object management, object export and import, environment promotion, release management, and rollback planning.
- Understanding of access reviews, certification campaigns, policy violations, segregation-of-duties controls, audit requirements, and compliance reporting.
- Working knowledge of SQL, XML, JSON, REST APIs, Java, BeanShell, application servers, and basic Linux or Windows operational commands.
- Ability to follow secure development, documentation, change management, testing, release, and production support practices.
- Preferred experience with IdentityIQ upgrades, patching, environment support, performance tuning, custom connector development, advanced connector customization, and web service connector implementation.
- Preferred experience with Lifecycle Manager customization, dynamic approval routing, complex fulfillment patterns, workflow monitoring, task optimization, certification campaign design, role mining, role modeling, policy configuration, deployment tooling, and operational reporting.
- Knowledge of cybersecurity and compliance frameworks such as ISO 27001, NIST, GDPR, audit controls, and evidence management.
- A SailPoint IdentityIQ certification or relevant IAM/IGA certification is required.
- A bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field is preferred.
Benefits
- Hybrid-friendly work culture with programs supporting financial, mental, physical, and social well-being.
- Hands-on work on mission-critical customer systems and opportunities for career growth and professional development.
- Access to learning opportunities and certifications with Microsoft, Google, and Amazon, along with coaching and hands-on experiences.
- Personalized development goals, career-path tools, and continuous feedback.
- Inclusive culture focused on belonging, empathy, learning, and shared success.
About Kyndryl
Kyndryl is a public IT services company that designs, runs, and modernizes mission-critical infrastructure for large enterprises and governments. Spun off from IBM in 2021, it is headquartered in New York City and trades on the NYSE (ticker: KD). The company provides managed infrastructure, cloud migration and operations across AWS, Azure, and Google Cloud, plus mainframe, network, security, data, and digital workplace services.