SailPoint Cloud Engineer

Job Summary

A large healthcare provider is seeking a SailPoint Cloud Engineer to support ongoing enhancements and customization of SailPoint’s identity governance platform within a Microsoft-centric environment. This role will focus heavily on access governance, workflow configuration, and role development as the organization continues to expand and mature its SailPoint implementation.

Key Responsibilities

• Design, build, and maintain SailPoint customizations, including roles, access profiles, and workflows
• Support and enhance SailPoint performance and functionality as the platform continues to expand across the organization
• Configure and manage access request workflows, including:
• Submission and approval routing
• Automated provisioning into Active Directory and cloud systems
• Role and access profile creation
• Manage identity lifecycle across source systems (Workday) through provisioning into AD and cloud applications
• Support access governance initiatives, including RBAC development and access certification processes
• Ensure proper controls between privileged and standard user access
• Troubleshoot provisioning issues and continuously improve IAM workflows and system performance

Must-haves

• 5+ years of experience in IAM, with hands-on SailPoint Cloud experience (IdentityNow)
• Bachelor’s degree
• Strong experience with SailPoint customizations, role buildouts, and access governance workflows
• Experience building and managing access request and provisioning workflows
• Strong experience with Active Directory (AD), including user/group management and access provisioning
• Hands-on experience with Microsoft Entra ID, including SSO configuration and conditional access policy management
• Experience configuring Single Sign-On (SSO) for enterprise applications using Entra ID
• Ability to implement and manage Conditional Access policies (MFA, device/location-based access, role-based controls)
• Strong understanding of IAM concepts, including:
• Role-Based Access Control (RBAC)
• Access certifications
• Privileged vs. standard access