3 days ago
Responsibilities
- Design, develop, configure, enhance, and support SailPoint IdentityIQ IAM and IGA solutions.
- Develop and customize IdentityIQ workflows for access requests, approvals, provisioning, deprovisioning, lifecycle events, escalations, exceptions, and manual fulfillment.
- Configure and maintain integrations using SailPoint connectors, JDBC, LDAP, Active Directory, REST, SOAP, flat files, HR systems, and enterprise applications.
- Support application onboarding, including source analysis, account and entitlement schemas, aggregation, identity correlation, manager mapping, provisioning policies, and certification enablement.
- Develop and maintain IdentityIQ rules, including BuildMap, Correlation, Customization, Before Provisioning, After Provisioning, Workflow, Certification, Policy, Validation, and Task rules.
- Configure Lifecycle Manager capabilities, including QuickLinks, access request forms, approval schemes, work items, birthright access, mover logic, and leaver deprovisioning.
- Maintain IdentityIQ applications, identities, attributes, managed attributes, roles, policies, populations, workgroups, email templates, forms, workflows, tasks, and configuration objects.
- Troubleshoot workflows, aggregation tasks, provisioning failures, identity refresh tasks, certification campaigns, policy violations, and connector issues.
- Validate and migrate IdentityIQ XML objects across development, test, UAT, pre-production, and production environments.
- Collaborate with architects, application owners, business users, security teams, testing teams, and operations teams on connector, entitlement, approval, provisioning, certification, and handover requirements.
- Support access certifications, role management, segregation-of-duties controls, audit evidence, compliance reporting, and policy violation handling.
- Prepare technical documentation, configuration guides, test evidence, deployment instructions, troubleshooting procedures, and support handover materials.
Requirements
- At least 7 years of hands-on SailPoint IdentityIQ development, configuration, integration, deployment, and support experience.
- Strong knowledge of IAM and IGA concepts, including identity lifecycle management, access governance, access certification, provisioning, deprovisioning, RBAC, and segregation of duties.
- Experience developing IdentityIQ workflows with Business Process Editor, workflow XML, process variables, approval steps, rules, scripts, subprocesses, forms, and workflow library methods.
- Experience with application onboarding, account and entitlement aggregation, identity and manager correlation, identity refresh, and provisioning configuration.
- Experience developing IdentityIQ rules using Java and BeanShell.
- Experience integrating IdentityIQ with Active Directory, LDAP, JDBC databases, REST APIs, SOAP services, web services, flat files, HR systems, and enterprise applications.
- Working knowledge of provisioning plans, account and attribute requests, entitlement models, managed attributes, roles, policies, populations, workgroups, and access profiles.
- Ability to troubleshoot IdentityIQ issues using logs, task results, workflow cases, debug pages, application configuration, aggregation outputs, and provisioning transaction details.
- Familiarity with IdentityIQ XML object management, object export and import, environment promotion, release management, and rollback planning.
- Understanding of access reviews, certification campaigns, policy violations, segregation-of-duties controls, audit requirements, and compliance reporting.
- Working knowledge of SQL, XML, JSON, REST APIs, Java, BeanShell, application servers, and basic Linux or Windows operational commands.
- Ability to follow secure development, documentation, change management, testing, release, and production support practices.
- Preferred experience with IdentityIQ upgrades, patching, environment support, performance tuning, custom connector development, advanced connector customization, and web service connector implementation.
- Preferred experience with Lifecycle Manager customization, dynamic approval routing, complex fulfillment patterns, workflow monitoring, task optimization, certification campaign design, role mining, role modeling, policy configuration, deployment tooling, and operational reporting.
- Knowledge of cybersecurity and compliance frameworks such as ISO 27001, NIST, GDPR, audit controls, and evidence management.
- A SailPoint IdentityIQ certification or relevant IAM/IGA certification is required.
- A bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field is preferred.
Benefits
- Hybrid-friendly work culture with programs supporting financial, mental, physical, and social well-being.
- Hands-on work on mission-critical customer systems and opportunities for career growth and professional development.
- Access to learning opportunities and certifications with Microsoft, Google, and Amazon, along with coaching and hands-on experiences.
- Personalized development goals, career-path tools, and continuous feedback.
- Inclusive culture focused on belonging, empathy, learning, and shared success.
About Kyndryl
We have the world’s best talent that design, run, and manage the most advanced and reliable technology infrastructure each day. Together, we think holistically about the health of these vital technology ecosystems. We are a focused, independent company that builds on our foundation of excellence by creating systems in new ways. Bringing in the right partners, investing in our business, and working side-by-side with our customers to unlock potential. We're raising the bar. Our experience speaks for itself: We have tens of thousands of highly skilled employees around the world serving most of the Fortune 100 companies. But our purpose is what drives us: Advancing the vital systems that power human progress. Because when a digital ecosystem is healthy, it can more readily adapt and support continuous growth and that opens up a world of possibility for everyone. Together, we are the heart of progress.