Sailpoint Entra
Job Summary
Do you love a career where you Experience Grow & Contribute at the same time while earning at least 10% above the market If so we are excited to have bumped onto you.
Learn how we are redefining the meaning of work and be a part of the team raved by Clients Job-seekers and Employees.
If you are aSailpoint Entra Professional looking for excitement challenge and stability in your work then you would be glad to come across this page.
We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.
Check if you are up for maximizing your earning/growth potential leveraging our Disruptive Talent Solution.
Expert-level understanding of SailPoint IdentityIQ (IIQ) and/or Identity Security Cloud (ISC) including architecture identity profiles sources connectors transforms rules workflows lifecycle states and access models.
Design and implement authoritative identity aggregation from Workday SAP SuccessFactors Active Directory LDAP and other HR systems.
Develop advanced identity correlation logic to prevent duplicate identities incorrect account linking orphan accounts and identity collisions.
Configure identity lifecycle events covering joiner mover leaver rehire contractor conversion leave of absence and organizational transfers.
Design automated provisioning and deprovisioning across Active Directory Microsoft Entra ID SaaS applications and on-premises systems.
Build complex access request workflows approval chains policy enforcement segregation-of-duties controls and emergency access processes.
Implement access certifications campaign scheduling reviewer escalation remediation tracking and audit reporting.
Troubleshoot aggregation failures provisioning plans connector exceptions workflow failures stale entitlements and reconciliation inconsistencies.
Implement least-privilege access role-based access control (RBAC) attribute-based access control (ABAC) and automated birthright access.
Optimize aggregation performance provisioning throughput identity refresh operations and large-scale certification campaigns.
Advanced SailPoint skills expected:
Custom connector development and integration patterns.
Rule development and API-based automation where supported by the platform.
Debugging connector and provisioning failures using logs traces and API responses.
Safe promotion of configurations across development testing staging and production.
Platform upgrade planning regression testing rollback strategies and operational monitoring.
Architect complex integrations between SailPoint and Microsoft Entra ID for identity governance access provisioning and lifecycle automation.
Deep understanding of Entra users groups enterprise applications app registrations service principals directory roles administrative units and tenant boundaries.
Integrate SailPoint with Microsoft Entra ID using supported connectors Microsoft Graph API SCIM and custom REST integrations where appropriate.
Implement automated user creation attribute updates group assignment access removal and account disablement.
Manage dynamic groups assigned groups group-based licensing nested group limitations and application-specific access requirements.
Understand the differences between cloud-only identities synchronized identities hybrid identities and externally managed identities.
Troubleshoot synchronization and attribute conflicts involving Microsoft Entra Connect Sync or Cloud Sync Active Directory and authoritative HR sources.
Design controls for privileged directory roles emergency accounts administrative access and privileged identity management (PIM).
Integrate Conditional Access MFA authentication strengths access reviews and identity governance capabilities into the overall IAM control framework.
Manage application identities and non-human identities including service principals workload identities credential rotation and ownership reviews.
The candidate must be able to design build and troubleshoot production-grade API integrations.
Work extensively with Microsoft Graph REST endpoints JSON payloads HTTP status codes pagination filtering batching and delta queries.
Implement OAuth 2.0 client credentials and authorization-code flows where applicable.
Understand delegated versus application permissions admin consent least-privilege Graph permissions and tenant-specific authorization.
Implement secure authentication using managed identities certificates or approved secrets-management solutions.
Develop PowerShell automation using Microsoft Graph PowerShell SDK and supporting tooling.
Handle throttling (
429) transient failures retry policies exponential backoff idempotency and eventual consistency.Diagnose permission errors
403 Forbidden404 Not Foundconflicting updates stale reads and failed asynchronous operations.Design API integrations that support audit logging correlation IDs monitoring and safe recovery after partial failures.
Required Skills:
SailPoint IdentityIQ / Identity Security Cloud Expert-level understanding of SailPoint IdentityIQ (IIQ) and/or Identity Security Cloud (ISC) including architecture identity profiles sources connectors transforms rules workflows lifecycle states and access models. Design and implement authoritative identity aggregation from Workday SAP SuccessFactors Active Directory LDAP and other HR systems. Develop advanced identity correlation logic to prevent duplicate identities incorrect account linking orphan accounts and identity collisions. Configure identity lifecycle events covering joiner mover leaver rehire contractor conversion leave of absence and organizational transfers. Design automated provisioning and deprovisioning across Active Directory Microsoft Entra ID SaaS applications and on-premises systems. Build complex access request workflows approval chains policy enforcement segregation-of-duties controls and emergency access processes. Implement access certifications campaign scheduling reviewer escalation remediation tracking and audit reporting. Troubleshoot aggregation failures provisioning plans connector exceptions workflow failures stale entitlements and reconciliation inconsistencies. Implement least-privilege access role-based access control (RBAC) attribute-based access control (ABAC) and automated birthright access. Optimize aggregation performance provisioning throughput identity refresh operations and large-scale certification campaigns. Advanced SailPoint skills expected: Custom connector development and integration patterns. Rule development and API-based automation where supported by the platform. Debugging connector and provisioning failures using logs traces and API responses. Safe promotion of configurations across development testing staging and production. Platform upgrade planning regression testing rollback strategies and operational monitoring. B. Microsoft Entra ID / Azure AD Architect complex integrations between SailPoint and Microsoft Entra ID for identity governance access provisioning and lifecycle automation. Deep understanding of Entra users groups enterprise applications app registrations service principals directory roles administrative units and tenant boundaries. Integrate SailPoint with Microsoft Entra ID using supported connectors Microsoft Graph API SCIM and custom REST integrations where appropriate. Implement automated user creation attribute updates group assignment access removal and account disablement. Manage dynamic groups assigned groups group-based licensing nested group limitations and application-specific access requirements. Understand the differences between cloud-only identities synchronized identities hybrid identities and externally managed identities. Troubleshoot synchronization and attribute conflicts involving Microsoft Entra Connect Sync or Cloud Sync Active Directory and authoritative HR sources. Design controls for privileged directory roles emergency accounts administrative access and privileged identity management (PIM). Integrate Conditional Access MFA authentication strengths access reviews and identity governance capabilities into the overall IAM control framework. Manage application identities and non-human identities including service principals workload identities credential rotation and ownership reviews. C. Microsoft Graph API and automation The candidate must be able to design build and troubleshoot production-grade API integrations. Work extensively with Microsoft Graph REST endpoints JSON payloads HTTP status codes pagination filtering batching and delta queries. Implement OAuth 2.0 client credentials and authorization-code flows where applicable. Understand delegated versus application permissions admin consent least-privilege Graph permissions and tenant-specific authorization. Implement secure authentication using managed identities certificates or approved secrets-management solutions. Develop PowerShell automation using Microsoft Graph PowerShell SDK and supporting tooling. Handle throttling (429) transient failures retry policies exponential backoff idempotency and eventual consistency. Diagnose permission errors 403 Forbidden 404 Not Found conflicting updates stale reads and failed asynchronous operations. Design API integrations that support audit logging correlation IDs monitoring and safe recovery after partial failures.