Lead IAM Engineer

Lead IAM Engineer
Location: Manassas, VA
Salary: $102,900–$190,500 per year
Position Overview
The Lead IAM Engineer leads the design, development, implementation, and support of Identity and Access Management (IAM) systems and solutions. The role focuses on enterprise identity governance, access lifecycle management, and the production support of SailPoint IdentityIQ and IdentityNow environments.
The position involves reviewing system, user, and administrative roles and accounts; evaluating access levels across enterprise applications and platforms; and developing scalable technology solutions to meet identity and access requirements.
Key Responsibilities
Lead IAM systems and solutions supporting SailPoint IdentityIQ and IdentityNow.
Enforce identity lifecycle management policies, procedures, and technical best practices.
Design, develop, configure, test, document, and maintain IAM solutions.
Develop and support lifecycle event management processes.
Develop and maintain SailPoint connectors, including Web Services, SCIM, JDBC, delimited file, and ServiceNow configurations.
Work with Identity Cubes, Identity Attribute Mappings, LCM/LCE workflows, and related SailPoint functionality.
Analyze, troubleshoot, and resolve IAM and security-related issues.
Review technical requirements, solution designs, infrastructure documentation, and support processes.
Partner with information security, risk management, infrastructure, architecture, and business teams to implement end-to-end IAM solutions.
Develop IAM technical strategies, standards, designs, and procedures aligned with business requirements.
Identify code deficiencies, review logs, investigate errors, and reproduce issues to determine appropriate solutions.
Ensure compliance with organizational policies, security requirements, and regulatory guidelines.
Lead cross-functional teams throughout IAM implementation initiatives.
Support multiple projects through successful completion.
Required Qualifications
Bachelor's degree in a quantitative, business, engineering, mathematics, statistics, or computer science field, or equivalent relevant experience.
5–7 years of related professional experience.
Strong experience supporting and developing SailPoint IdentityIQ.
Programming experience with Java and BeanShell.
PowerShell experience is beneficial.
Knowledge of cloud computing security.
Knowledge of Identity-as-a-Service (IDaaS) solutions.
Preferred Certifications
Certified Identity and Access Manager (CIAM), required within 120 days.
SailPoint certification, such as IdentityNow or IdentityIQ Certified Implementation Engineer.
Certified Identity and Security Technologist (CIST), preferred.
Certified Access Management Specialist (CAMS), preferred.
Core Competencies
Analytical and problem-solving skills
Independent decision-making
Technical aptitude
Project management
High attention to accuracy
Judgment and decision-making
Ability to communicate recommendations to senior leadership
Ability to manage multiple projects
Cross-functional collaboration
Continuous development of technical expertise

Work arrangement
Yes