Key Responsibilities

• Administer the ISC platform day to day, including identity profiles, sources, roles, access profiles, and provisioning policies.
• Operate and maintain the full identity lifecycle (joiner / mover / leaver), including automated provisioning and deprovisioning; identify and remediate orphaned, stale, or mismatched access.
• Onboard and maintain integrations with HR, directory, and target application sources; troubleshoot aggregation and provisioning issues.
• Build and maintain access request and approval workflows, roles, and entitlement structures.
• Operate the platform’s AI/ML governance capabilities and apply independent judgment to validate automated role and access recommendations before they take effect.
• Configure and run access certification campaigns; track remediation to closure and produce audit-ready evidence supporting periodic access.
• Maintain segregation of duties policies and manage violations and exceptions.
• Produce access, certification, and identity metrics for compliance, audit, and leadership.
• Provide Tier 2/3 support for identity and access issues; partner with the service desk on triage and knowledge transfer.
• Maintain runbooks, configuration documentation, and continuity / disaster-recovery procedures for the platform.
• Monitor platform releases, assess impact, validate changes in non-production, and manage vendor support cases.

Required Qualifications

• 3+ years in IAM/IGA operations or engineering.
• 1+ year hands on with SailPoint Identity Security Cloud. 
• Working knowledge of identity lifecycle, RBAC, access certification, segregation of duties, and least-privilege principles.
• Proficiency integrating identity sources — Active Directory / Entra ID and an HRIS (Workday, Oracle or equivalent).
• Configuration aptitude with ISC transforms, rules, and workflow logic.
• Working understanding of HIPAA Security Rule access control and audit requirements.

Preferred Qualifications

• SailPoint certification (Certified Identity Security Cloud Engineer or equivalent).
• Experience in healthcare or another regulated industry.
• Experience integrating ISC with ITSM (e.g., ServiceNow), REST APIs, and SIEM log forwarding.
• Exposure to adjacent identity controls: PAM, MFA, and conditional access.

Key Competencies

• Strong analytical judgment and attention to detail in a regulated, audited environment.
• Clear documentation and communication with technical and non-technical stakeholders.
• Ability to operate independently as the primary platform owner while escalating appropriately.