Principal SailPoint Engineer | Remote, USA

Overview As Principal SailPoint Engineer you will lead design, implementation and governance of SailPoint ISC and IIQ within Optiv AFC’s security operations framework. You’ll collaborate with cross-functional teams to deliver IAM solutions for a diverse client base, driving automation, lifecycle management, and secure access controls. You will own high-profile client configurations, troubleshoot incidents, and guide architectural decisions. This role offers impact across security maturity initiatives in a fully remote, client-facing environment. Compensation / Benefitsremote workwork-life balanceprofessional training resourcesvolunteer opportunitiesinclusive cultureremote-friendly policies ResponsibilitiesDesign, implement and manage SailPoint ISC and IIQ across client and internal environmentsLead IAM initiatives and contribute to client security strategyArchitect documentation, use cases, requirements, and test cases for IAM solutionsDevelop automated, self-service, and resilient IAM capabilitiesProvide incident support and root-cause analysis for IAM platformsCollaborate with IT, security, and business units to address customer requirementsOwn client configuration issues and ensure timely resolutionMaintain standards and operation of SailPoint and related IAM environments Key requirements7-10 years of professional information security experience5+ years of SailPoint experience in productionExperience with IAM, PAM, and identity governance conceptsStrong scripting skills (e.g., Java, PowerShell)Knowledge of cloud environments (AWS/GCP) is a plusExperience with SSO, SCIM, OAuth, SAML, PKIProficiency with Active Directory and Microsoft technologies (AD, Azure Entra ID)Strong communication skills and ability to work with cross-functional teamsExperience with incident management and root cause analysisSecurity certifications preferred (e.g., CISSP, CEH)Strong communication (verbal and written)collaboration across cross-functional teamsproblem-solving and analytical thinkingSailPoint ISC and IIQIdentity and Access Management (IAM)PAM tools (CyberArk, BeyondTrust, Okta)