Principal SailPoint Engineer

Optiv

Principal SailPoint Engineer managing and maintaining security systems for Optiv Security's AFC team. Collaborating with teams and ensuring compliance within client environments.

Posted 7/3/2026full-timeRemote • Massachusetts, Montana, North Carolina, Utah • 🇺🇸 United StatesLeadWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformJava

About the role

Key responsibilities & impact

The Principal SailPoint Engineer will be responsible for following Optiv AFC processes & procedures, as well as managing and maintaining security systems across internal and client environments.
The Principal SailPoint Engineer will work closely with Management, Solution Architects, Principal Security Engineers from other internal teams and clients to complete high profile, critical services to existing AFC clients.
They will serve as a primary responder for AFC customer systems, taking ownership of client configuration issues, and tracking through resolution.
The Identity and Access Management (IAM) Engineer will be responsible for designing, implementing, and managing SailPoint ISC and IIQ to safeguard sensitive information and ensure compliance with regulatory standards within our client environments.
SailPoint ISC and IIQ will be the primary tools in scope, with required supporting knowledge in other PAM and IAM products such as: Cyberark and Okta.
Collaborate with cross-functional teams, lead IAM initiatives, and contribute to the development and execution of the client's overall security strategy.
Review and provide feedback on established strategies and multi-year plans incorporating all parts of IGA and IAM: access requests, lifecycle events, provisioning functions, role-based access, separation of duties, access certifications.
Architect, design, develop and troubleshoot IGA solutions with the ability to provide technical and architectural design documentation, recommendations, specifications, use cases, requirements and test cases.
Create solutions that drive full automation, self-service, and resiliency.
Implement customizations to address customer business requirements.
Participate in security and application troubleshooting and incident problem resolutions with other infrastructure teams, including storage, messaging, server, and network.
Provide engineering support for complex and recurring incidents related to IAM platforms and perform root causes analysis in accordance with customer policies and standards.
Responsible for the standards, design, and operation of SailPoint and elated environments.
Provides expertise in all aspects of the following technologies: Azure Entra ID, Microsoft technologies Active Directory (AD), Active Directory Lightweight Directory Services (ADLDS), Active Directory Federated Services (ADFS), Sailpoint, CyberArk, Okta, BeyondTrust and Public Key Infrastructure (PKI) are included as key technologies.

Requirements

What you’ll need

Bachelor's Degree
College degree or at least 7 years of related experience and/or training; or equivalent combination of education and experience required.
7-10 years Professional experience in the Information Security field and within discipline required.
7-10 years Advanced information security knowledge in one or more areas to include: Enterprise end-point security products (i.e. McAfee e-Policy Orchestrator, Virus Scan, Anti-Spyware, Host Data Loss Protection, Endpoint Encryption, etc.) Security Information and Event Manager (SIEM), to include: NitroSecurity ArcSight Q1 Labs RSA Envision Network Firewall, Web Proxy, E-Mail and Web Gateway etc. to include: Palo Alto / Checkpoint / Juniper / McAfee / Cisco / Blue Coat / Imperva required.
5+ years of experience as a senior level IDAM engineer preferred.
5+ years of engineer level SailPoint experience required.
Previous SailPoint deployment experience in a production environment preferred.
Experience writing scripts utilizing Java, PowerShell, etc. proffered.
Experience with AWS/GCP cloud environments a bonus.
Knowledge and experience with Identity Management technologies like SSO, SCIM, OAuth, SAML, Encryption, PKI.
Excellent communication skills, both verbal and written are required.
Solid understanding of how Role Based Access Control (RBAC) works in large, distributed environments.
Solid understanding of cybersecurity principles and best practices.
Excellent problem-solving and analytical skills.
Experience working with PAM systems.
Experience with MFA protocols and techniques.
GIAC, CISSP, CCSE, CISA, HBSS, NSA, CEH, Cisco Security, Security +, or other security certifications preferred
CCNA, CCDA, CCSA, CCIE, CISSP, CEH, or MCSE preferred.
Microsoft technical certifications are preferred.

Benefits

Comp & perks

Work/life balance
Professional training resources
Creative problem-solving and the ability to tackle unique, complex projects
Volunteer Opportunities.
“Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.
The ability and technology necessary to productively work remotely/from home (where applicable)

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Identity and Access Management (IAM)SailPoint DeploymentScripting (Java, PowerShell)Enterprise Endpoint SecuritySecurity Information and Event Manager (SIEM)Role Based Access Control (RBAC)Multi-Factor Authentication (MFA)Cloud Environments (AWS/GCP)Cybersecurity PrinciplesPAM Systems

Soft Skills

Excellent Communication SkillsProblem-Solving SkillsAnalytical Skills

Certifications

CISSPCEHGIACCISASecurity +CCNACCDACCSACCIEMCSE