Senior Sailpoint Engineer

JOB SUMMARY:

Argano is seeking an experienced SailPoint Engineer to design, build, and operate our identity governance program on SailPoint Identity Security Cloud (ISC). This is a hands-on engineering role for someone who has already worked at real enterprise scale—our managed identity population exceeds 400,000 users—and is comfortable owning the technical depth of a large, complex SailPoint environment: connectors and integrations, identity lifecycle automation, access certifications, role and policy design, and day-to-day platform reliability.

The SailPoint Engineer will partner closely with security, IT operations, application owners, HR systems teams, and compliance stakeholders to ensure the right people have the right access at the right time—and that we can prove it during an audit.

RESPONSIBILITIES:

• Design, configure, and maintain SailPoint Identity Security Cloud (ISC) across identity sources, applications, and provisioning connectors
• Own end-to-end Joiner-Mover-Leaver (JML) lifecycle automation, integrating with HR systems (e.g., Workday), Active Directory / Entra ID, LDAP, and downstream applications
• Design and maintain Role-Based Access Control (RBAC) models, Separation of Duties (SoD) policies, and birthright/entitlement structures at enterprise scale
• Build and tune access certification campaigns, ensuring accurate, auditable, and timely recertification cycles across a large and diverse application portfolio
• Develop and support custom and out-of-the-box connectors, workflows, and integrations (REST/SCIM/SOAP APIs) to onboard new applications into governance
• Troubleshoot provisioning, aggregation, and certification issues across a high-volume identity population, balancing performance, accuracy, and compliance
• Partner with security and compliance teams to support SOX, SOC 2, and other audit requirements, providing evidence and remediating findings
• Collaborate with application owners and business stakeholders to translate access governance requirements into scalable SailPoint solutions
• Contribute to the platform roadmap: recommend improvements, evaluate new SailPoint capabilities, and help mature governance maturity across the organization
• Document architecture, configurations, and standard operating procedures; participate in on-call/escalation support for critical identity platform issues

EDUCATION:

• Bachelor's degree in Computer Science, Information Security, or a related field preferred; equivalent practical experience will also be considered.

LOCATION:
This is an onsite position based in Seattle, WA or Orlando, FL. Candidates must be able to work onsite from either of these locations.

EXPERIENCE:

• 5+ years of overall experience in Identity and Access Management (IAM), with a strong preference for candidates whose background is concentrated in Identity Governance and Administration (IGA) specifically
• 2+ years of hands-on experience with SailPoint Identity Security Cloud (ISC)—the SaaS/cloud platform (formerly IdentityNow)—configuring sources, provisioning, access profiles, roles, workflows, and certification campaigns
• Demonstrated experience supporting a large identity population—100,000+ managed identities—including the operational and performance challenges that come with scale (aggregation windows, certification campaign design, connector throughput, etc.)
• Proven experience operating in a complex, matrixed enterprise environment with a large, heterogeneous application portfolio, multiple business units, and competing stakeholder priorities
• Solid understanding of identity lifecycle management and JML processes, including integration with HR systems and directory services (Active Directory, Entra ID/Azure AD, LDAP)
• Working knowledge of RBAC and/or ABAC modeling, SoD policy design, and access certification/attestation best practices
• Experience with API-based integrations (REST, SCIM, SOAP) for connector development and troubleshooting
• Strong troubleshooting skills and comfort owning production issues in a platform that many other teams depend on.

PREFERRED QUALIFICATIONS:

• SailPoint Certified IdentityNow Engineer, SailPoint Certified Implementation Engineer (ISC), or equivalent SailPoint certification
• Prior experience with SailPoint IdentityIQ (IIQ) in addition to ISC, particularly if you've supported a migration from IIQ to ISC
• Experience in a regulated industry (financial services, healthcare, insurance, etc.) supporting SOX, HIPAA, or similar compliance frameworks
• Familiarity with scripting/automation (PowerShell, Python, or Beanshell) for custom connectors or workflow logic
• Relevant security certifications such as CISSP, CISM, or CIAM