Senior SailPoint Engineer-Identity Security Cloud (ISC)

GSPANN is hiring a Senior SailPoint Engineer with expertise in Identity Security Cloud (ISC) to design, configure, and manage enterprise identity governance and privileged access solutions. The role focuses on SailPoint ISC engineering, identity lifecycle management, access governance, and secure integrations across cloud and enterprise platforms.

• Own day-to-day engineering and configuration activities for SailPoint Identity Security Cloud (ISC), including Joiner-Mover-Leaver (JML) processes, access requests and approvals, identity profiles, lifecycle states, correlation rules, access profiles, roles, entitlements, and access certifications.
• Execute hands-on integrations using System for Cross-domain Identity Management (SCIM), Representational State Transfer (REST) Application Programming Interfaces (APIs), and SailPoint connectors.
• Configure and maintain Separation of Duties (SoD) policies, Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and least-privilege security controls.
• Ensure operational stability, scalability, and performance of the SailPoint ISC tenant.
• Engineer and support CyberArk Privileged Access Management (PAM) solutions across infrastructure and enterprise applications.
• Integrate Identity Governance and Administration (IGA) and PAM platforms with Microsoft Entra ID (formerly Azure Active Directory), Amazon Web Services (AWS) Identity and Access Management (IAM), on-premises systems, and Software as a Service (SaaS) applications.
• Enforce global access governance standards across regions and business units.
• Execute and support access certifications, audit evidence collection, and remediation activities.
• Ensure compliance with regulatory and security standards such as Sarbanes-Oxley (SOX), General Data Protection Regulation (GDPR), ISO 27001, National Institute of Standards and Technology (NIST), and internal control requirements.
• Collaborate with Internal Audit and Internal Control teams during assessments and compliance audits.
• Translate security and control objectives into practical and enforceable technical configurations.
• Automate identity lifecycle and governance workflows using PowerShell, Python, and SailPoint scripting and rules.
• Identify technical debt, operational inefficiencies, and control gaps, and recommend improvement initiatives.
• Contribute to global Identity and Access Management (IAM) roadmaps and architectural standards.
• Drive technical design and configuration decisions across SailPoint ISC and PAM platforms.
• Define and implement integration patterns and automation approaches for IAM solutions.
• Provide recommendations that influence global IAM standards, governance models, and security controls.

• 5+ years of hands-on Identity Governance and Administration (IGA) experience with strong expertise in SailPoint Identity Security Cloud (ISC).
• Hold certifications such as SailPoint Identity Security Cloud Certification, CyberArk Defender, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA).
• Proven experience in SailPoint ISC configuration and identity lifecycle management.
• Manage roles, access profiles, entitlements, and certification processes effectively.
• Apply strong knowledge of SCIM, Security Assertion Markup Language (SAML), OAuth, REST APIs, and Lightweight Directory Access Protocol (LDAP).
• Demonstrate strong understanding of identity lifecycle management, RBAC, ABAC, SoD, and least-privilege security principles.
• Work effectively in regulated enterprise environments with strong compliance and governance requirements.