Palyrian - Senior Identity Engineer
Requirements
• 4+ years of hands-on SailPoint IdentityIQ and/or Identity Security Cloud experience, including at least two full implementation or major upgrade cycles. • 6+ years overall in identity and access management or enterprise software engineering. • Strong Java and BeanShell for IIQ, and/or transforms, cloud rules, and REST API development for ISC. Comfortable with SQL, XML, and at least one other scripting language. • Deep working knowledge of identity governance: joiner-mover-leaver, role and attribute-based access, certifications, segregation of duties, and provisioning. • Demonstrated ability to own a workstream and make design decisions within it, rather than working exclusively from someone else’s specification. • The ability to work directly with client stakeholders, explain technical decisions in plain language, and manage expectations in a live environment. • A focus on understanding the problem rather than producing syntax. Writing code is the part of this job that is getting easier; knowing what should be built is not. • Evidence that you build or learn outside of work; a side project, a home lab, something recent you taught yourself. • S. based and authorized to work in the United States. • Experience across both IdentityIQ and Identity Security Cloud, including IIQ-to-ISC migration. • SailPoint certification (Certified IdentityIQ Engineer and/or Certified Identity Security Engineer). If you are not certified but can demonstrate equivalent delivery depth, tell us. We will look at the work first and sort out credentials • Exposure to non-human identity, machine identity, or secrets platforms (Oasis, C1, HashiCorp Vault, or comparable). This is where a growing share of Palyrian’s work is heading. • Experience with adjacent identity domains or IGA products: PAM (CyberArk, Delinea, BeyondTrust), IGA (Saviynt, Veza), or IdP and authentication platforms (Okta, Entra ID, Ping). • Identity protocol fluency: SAML, OAuth 2.0, OIDC, SCIM. • Regulated industry experience and the audit and compliance expectations that come with it. • CI/CD and infrastructure automation applied to identity platform deployments. • A Note on Certifications • Certifications help us find you and help clients trust the team, and Palyrian sponsors them. They are not how we decide whether you can do the job. • Palyrian is a boutique that runs like a tech startup. Identity must be your thing. The team lives by four principles: • Builder's Mindset. When you see a better way, you build it. Problems don’t come with answers attached. • Builder's Mindset. • Own the Outcome. You are accountable for whether the client’s program improves, not just whether the ticket closed. • Own the Outcome. • Always Be Learning. Identity changes fast, and non-human identity changes faster. You keep pace and bring what you learn back to the team. • Always Be Learning. • Prideful Excellence. Work that holds up after we leave. Clients return because of the quality, not the contract. • Prideful Excellence. • If you have spent the last few years going deeper into a single platform and have started to feel the walls, that is a good reason to talk to us rather than a reason not to. • An introductory screening. • A technical interview with Palyrian. Expect roughly 30 minutes of systems-thinking and scenario questions rather than a live coding exercise. This is the first real gate. • A behavioral and culture conversation with one of the founders. • Two interviews, and we try to keep them inside a single hour where we can. We would rather move quickly than run you through a gauntlet.
Responsibilities
• Lead the technical portion of product health checks and platform architecture reviews: assess configuration, code quality, performance, and coverage, and produce actionable • Contribute grounded, hands-on input to future-state architecture and tool evaluations identifying what these platforms actually do, not what the marketing materials • Translate assessment findings into scoped, sequenced engineering plans that can be executed. • Own a workstream end to end on a client program, including its scope, quality, and delivery. • Design and build custom SailPoint IIQ and/or ISC solutions: connectors, workflows, rules, transforms, provisioning policies, etc. • Design the localized pieces of a process. For example, the full sequence of events and approvals when an employee goes on extended leave and returns without needing an architect to specify it for you. • Run App Factory delivery: help define onboarding patterns, build reusable templates and automation, and implement various connectors. • Integrate with enterprise systems (Active Directory and Entra ID, HR platforms, ServiceNow, cloud platforms, custom applications) through web services, JDBC, or other types of connectors. • Review other engineers' application design and connector build-out. Own code review, testing strategy, and whether it is maintainable. • Mentor junior engineers through pairing, review, and direct feedback. • Manage and improve access certification campaigns, reporting, and program analytics. • Drive configuration, tuning, and automation improvements so operational effort falls over time. • Lead knowledge transfer so client teams can own more of their own platform.
Benefits
• Remote-first, U.S. based. Flexible hours, with client time zones taking priority when an engagement calls for it. • 20 days of paid time off, granted as a bucket rather than accrued, plus holidays. • Medical, dental, and vision coverage through Aetna. • 401(k) with company match: full match on the first 3% and half match on the next 2%. • Annual performance-based bonus eligbility. • Sponsored training and certifications, including platform-specific enablement. • Direct client work, real ownership, and a seat at a boutique early enough that your work shapes the firm.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT