IAM Engineer

Posted 3 days ago

atosChicago (IL)

Computer Systems Engineers/Architects Computer Systems Design Services

SENIORITY

Lead

Apply

About the role

This role builds and maintains complex integrations, develops automation, engineers Sail Point rules and workflows, and ensures scalable, secure identity architecture across the enterprise. The IAM Sail Point Engineer partners with IAM leadership, cybersecurity, HRIS, infrastructure, and application teams to deliver modern identity solutions aligned with HIPAA, NIST, Zero Trust, and internal governance requirements. Department & Role Relationships• HIS Identity and Access Management• Reports to Identity and Access Management Manager Minimum Qualifications• Strong engineering mindset with ability to design scalable identity solutions.• Ability to translate business requirements into technical architecture.• Strong troubleshooting and analytical skills.• Clear communication skills with ability to explain complex technical concepts.• Commitment to secure, compliant, and resilient identity operations.• Ability to collaborate across cybersecurity, infrastructure, HRIS, and application teams.

Preferred Qualifications: • Sail Point Engineer or Architect certification.• Experience engineering identity integrations with Cerner, Epic or other EMR identity models.• Experience with cloud identity governance (Azure, AWS, GCP).• Experience with Postman, API testing, and integration debugging.• Experience supporting large-scale identity modernization initiatives. Knowledge, Skills, Abilities• Bachelor’s degree in Information Technology (IT), Computer Science, Cybersecurity, or a related field OR equivalent experience.• 5+ years of hands-on experience engineering or developing IGA solutions.• Strong experience with Sail Point Identity Security Cloud and/or IdentityIQ.• Demonstrated experience writing Sail Point Rules (Bean Shell/Java) and building custom workflows.• Strong scripting experience (Power Shell, Java Script, Python, Bean Shell).• Experience engineering integrations using SCIM, REST APIs, SAML, OAuth 2, OIDC.• Strong understanding of identity lifecycle management, RBAC/ABAC, SoD, and identity architecture.• Experience with Active Directory, Entra ID, LDAP, HRIS systems, and cloud identity platforms.• Ability to work in a complex, unionized healthcare environment. Responsibilities & Typical Duties Sail Point Engineering & Development:• Design, develop, and maintain Sail Point Rules (Before/After Provisioning, Aggregation, Correlation, Custom Workflows).• Build and optimize complex provisioning workflows, lifecycle event logic, and identity orchestration.• Engineer and maintain custom connectors, integration logic, and advanced Sail Point configurations.• Develop custom Sail Point transforms, policies, and identity processing logic.• Perform advanced troubleshooting of provisioning, aggregation, and connector failures. Application Onboarding & Integration Engineering:• Lead onboarding of new applications into Sail Point, including: o schema discovery o connector engineering o entitlement modeling o provisioning/deprovisioning logic o aggregation job tuning• Build and support integration using: o SCIM o REST APIs o SAML o OAuth 2 o OIDC• Engineer identity data flows between Sail Point, AD, Entra ID, HRIS, EMR systems, and cloud platforms. Automation and Scripting:• Develop automation using Power Shell, Bean Shell, Java Script, Python, or similar languages.• Build scripts to support identity lifecycle operations, data cleanup, and system integrations.• Create API-based automation for identity data exchange and workflow optimization.• Maintain version-controlled code repositories and follow secure development practices. Directory and Cloud Identity Engineering:• Engineer identity integrations with Active

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.