Who We're Looking For (Position Overview)
Spry Methods is seeking an experienced SailPoint IdentityIQ Consultant to support enterprise Identity and Access Management (IAM) initiatives for a federal customer. This role is responsible for designing, developing, configuring, integrating, and supporting SailPoint IdentityIQ (IIQ) solutions with a strong focus on identity lifecycle management, provisioning, application integrations, workflows, and governance.
The ideal candidate has extensive hands-on experience with SailPoint IdentityIQ 8.x, Identity Lifecycle Manager (LCM), workflow development, application onboarding, provisioning, IdentityIQ object configuration, Oracle EBS integrations, and Segregation of Duties (SoD) policy implementation. This individual will partner with technical and business stakeholders to translate IAM requirements into scalable IdentityIQ solutions that support secure identity governance and automated access management.
What Your Day-To-Day Looks Like (Position Responsibilities):
As a SailPoint IdentityIQ Consultant, you will:
- Design, develop, configure, and support SailPoint IdentityIQ 8.x solutions within enterprise IAM environments.
- Configure and support IdentityIQ Lifecycle Manager (LCM), including access requests, approvals, provisioning, request tracking, and identity lifecycle workflows.
- Develop, customize, and troubleshoot IdentityIQ workflows supporting identity creation, contractor onboarding, rehire, access requests, access extensions, approval routing, fulfillment, and exception handling.
- Build and configure IdentityIQ forms supporting business-driven identity and access request processes.
- Configure and support IdentityIQ application integrations, including JDBC applications and enterprise application connectors.
- Implement and troubleshoot account aggregation, entitlement aggregation, correlation, identity linking, provisioning, and write-back operations.
- Develop and maintain SailPoint rules, scripts, XML configurations, and customizations using BeanShell, Java, XML, or similar technologies.
- Configure and support IdentityIQ identity lifecycle processes including joiner, mover, leaver, contractor onboarding, identity refresh, account linking, and entitlement management.
- Configure and support Oracle EBS integrations within SailPoint IdentityIQ, including entitlement aggregation and provisioning.
- Develop and support Segregation of Duties (SoD) policies, policy violations, mitigation controls, approval routing, and exception handling.
- Extend IdentityIQ functionality using custom workflows, forms, advanced policies, rules, XML configuration objects, SQL logic, and custom approval screens.
- Troubleshoot IdentityIQ provisioning issues using workflow history, provisioning plans, task results, connector logs, database records, and downstream application diagnostics.
- Support custom reporting for access requests, provisioning status, entitlement analysis, SoD violations, audit reporting, and compliance activities.
- Partner with functional stakeholders to translate IAM business requirements into scalable IdentityIQ solutions.
- Support production operations, system enhancements, troubleshooting, testing, and ongoing IdentityIQ platform improvements.
What You Need to Succeed (Minimum Requirements):
Active Public Trust or ability to obtain and maintain a U.S. Government Public Trust.
U.S. Citizenship or lawful permanent residency (Green Card) in accordance with customer requirements.
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field (or equivalent experience).
5+ years of experience implementing and supporting SailPoint IdentityIQ in enterprise environments.
Hands-on experience with SailPoint IdentityIQ 8.x configuration, customization, and administration.
Strong experience with IdentityIQ Lifecycle Manager (LCM).
Experience developing and troubleshooting IdentityIQ workflows, forms, rules, and application integrations.
Strong understanding of IdentityIQ objects including Identity, Link, Application, ManagedAttribute, Bundle/Role, ProvisioningPlan, Workflow, Rule, TaskDefinition, IdentityRequest, Policy, and Certification.
Experience with identity aggregation, entitlement aggregation, identity refresh, correlation, provisioning, and identity lifecycle automation.
Experience configuring enterprise application integrations, including JDBC connectors.
Experience with BeanShell, Java, XML, SQL, or similar scripting/programming languages.
Experience troubleshooting provisioning failures, connector issues, workflow execution, and IdentityIQ logs.
Strong communication, analytical, and problem-solving skills.
Ideally, You Also Have (Preferred Qualifications):
Experience supporting Oracle E-Business Suite (Oracle EBS) integrations within SailPoint IdentityIQ.
Understanding of Oracle EBS security concepts including users, responsibilities, menus, functions, concurrent programs, and entitlement structures.
Experience implementing or supporting Segregation of Duties (SoD) policies, policy evaluation, mitigation controls, and compliance reporting.
Experience extending IdentityIQ using advanced policies, custom rules, workflows, XML configuration objects, SQL logic, and custom approval processes.
Experience developing IdentityIQ reports supporting provisioning, audit, compliance, access certifications, and entitlement analysis.
Experience integrating identity governance solutions into enterprise environments.
Knowledge of Identity Governance and Administration (IGA), Role-Based Access Control (RBAC), access certification, provisioning, and identity lifecycle management.
SailPoint IdentityIQ certifications strongly preferred.
Experience supporting federal government customers.
