Sailpoint IIQ L3 Support

Job Description

8+ years in IAM, with 5+ years hands-on SailPoint IdentityIQ (IIQ) experience in L2/L3 production support, including development and customization of workflows, rules, forms, lifecycle events, policies, and reports.

Application onboarding experience, including end-to-end onboarding of new applications into IIQ, covering connector/application configuration, schema and account/entitlement mapping, correlation, aggregation, provisioning policies, testing/UAT, and production rollout.

Strong hands-on experience configuring and supporting account aggregation, identity correlation, entitlement management, automated provisioning/deprovisioning, and Role-Based Access Control (RBAC).

Experience with the full Joiner-Mover-Leaver (JML) lifecycle, access requests and approvals (LCM), and role and entitlement management.

Experience supporting access certification campaigns, including periodic reviews and renewals, Segregation of Duties (SoD) controls, policy compliance, and audit requirements.

Experience with HCM integrations and IIQ integrations with Active Directory, Azure AD/Entra ID, LDAP, JDBC/databases, REST APIs, SOAP web services, delimited files, and ServiceNow.

Proven ability to troubleshoot complex production issues, including provisioning and aggregation failures, perform root cause analysis, and implement long-term fixes for platform stability and performance.

Ability to read and debug BeanShell/Java rules and workflow XML.

Strong Oracle Database knowledge, including SQL, IIQ schema, locking, and performance analysis, along with Linux log analysis experience.

IIQ platform knowledge including Tomcat/WebLogic, Quartz Task Scheduler, IIQ Console, Debug Page, environment promotion, and participation in IIQ patching, upgrades, and enhancements.

Experience with ITIL incident, problem, and change management processes.

Strong technical documentation skills and experience mentoring junior team members.