Role & Responsibilities

Identity Platform Engineer – Roles & Responsibilities

1. Build and Manage Identity Systems

Design, implement, and maintain enterprise Identity & Access Management (IAM) solutions.
Configure and manage platforms such as SailPoint , Microsoft Entra ID , and Active Directory .
Ensure identity systems are secure, scalable, and highly available.

2. Automate Joiner, Mover, and Leaver (JML) Processes

Build automated workflows for employee onboarding, role changes, and offboarding.
Automatically provision and deprovision user accounts and application access based on HR events.
Eliminate manual identity management tasks through automation.

3. User Provisioning and Access Management

4. Application Integration

Integrate business applications with the organization's IAM platform.
Build and maintain connectors using APIs, SCIM, LDAP, or other integration methods.
Enable Single Sign-On (SSO) and centralized identity management across applications.

5. Implement Role-Based Access Control (RBAC)

Design and maintain RBAC models.
Define birthright access for new employees based on their department or role.
Ensure users receive only the permissions required to perform their jobs (Principle of Least Privilege).

6. Identity Governance and Compliance

Implement access governance policies and approval workflows.
Support access certification and periodic access reviews.
Maintain audit logs and ensure compliance with security and regulatory requirements.

7. Manage Authentication and Single Sign-On (SSO)

Configure and support authentication protocols such as:
- SAML
- OAuth 2.0
- OpenID Connect (OIDC)
Enable secure Single Sign-On across enterprise applications.

8. Troubleshoot Identity Issues

Investigate and resolve provisioning failures, synchronization issues, authentication errors, and connector problems.
Perform root cause analysis and implement permanent fixes instead of temporary workarounds.

9. Develop Automation and Customizations

Create custom workflows, rules, transforms, and scripts within SailPoint.
Automate repetitive IAM processes using scripting languages such as PowerShell, Java, or Python where applicable.
Build reusable solutions that improve operational efficiency.

10. Collaborate with Cross-Functional Teams

Work closely with HR teams for employee lifecycle management.
Coordinate with IT Infrastructure, Security, Application Owners, and DevOps teams to onboard applications and manage access.

11. Documentation and Knowledge Sharing

Document identity workflows, integrations, configurations, and standard operating procedures.
Maintain technical documentation and contribute to internal knowledge repositories.

12. Ensure Security Best Practices

Follow enterprise security standards and IAM architecture guidelines.
Monitor identity systems for potential risks or unauthorized access.
Continuously improve identity processes to enhance security and operational efficiency.

Ideal Candidate

Strong Identity Platform Engineer Profile — treats identity as a scalable platform product, with end-to-end lifecycle automation experience
Mandatory (Experience 1) – Must have 5+ years of total experience engineering enterprise identity platforms, with a minimum of 3 years hands-on SailPoint (connectors, rules, transforms, workflows, policies).
Mandatory (Experience 2) – Must have experience building JML lifecycle automation (joiner/mover/leaver), turning manual, exception-heavy identity processes into automated, policy-driven platform components.
Mandatory (Experience 3) – Must have experience owning application onboarding into an identity governance model — birthright access, RBAC, and request-driven access.
Mandatory (skill 1) – Must have hands-on experience provisioning and deprovisioning access across Active Directory, Entra ID, and enterprise applications.
Mandatory (skill 2) – Must have a solid grip on SAML, OAuth2, OIDC, and directory sync.
Mandatory (skill 3) – Must have strong troubleshooting skills across provisioning flows and integrations, with a focus on root-cause fixes over workarounds.
Mandatory (Education) – Must have a degree in CS / IT / Engineering or equivalent real-world experience.
Preferred (Process) – Experience contributing to shared knowledge bases, runbooks, and improving identity platform standards over time.

SailPoint Engineer- IPE

Start with your email