Sailpoint Developer

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses.  We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

As a SailPoint IIQ Developer, you will contribute to the implementation, enhancement, and support of enterprise IAM and IGA capabilities using SailPoint IdentityIQ. You will design and maintain workflows, rules, forms, tasks, connectors, provisioning logic, and integration components required to support Joiner, Mover, Leaver, access request, approval routing, birthright provisioning, deprovisioning, manual fulfillment, and periodic access review processes. The role requires strong understanding of the SailPoint IIQ object model, workflow engine, Lifecycle Manager capabilities, application onboarding patterns, entitlement management, identity correlation, account aggregation, provisioning plans, and certification processes. You will support integrations with authoritative sources such as HR systems, directory services such as Active Directory or LDAP, databases, REST or SOAP APIs, flat files, and enterprise applications using out-of-the-box or custom integration approaches. You will also troubleshoot and optimize IIQ workflows, aggregation tasks, provisioning failures, identity refresh tasks, certification campaigns, policy violations, and custom rules. The candidate should be able to analyze logs, review task results, validate XML objects, test configuration changes, create deployment evidence, and ensure all customizations align with IAM governance, security, compliance, and operational requirements.

Design, develop, configure, and support SailPoint IdentityIQ solutions for enterprise IAM and IGA use cases. Develop and customize IdentityIQ workflows for access requests, approvals, provisioning, deprovisioning, lifecycle events, escalation, rejection handling, manual fulfillment, and exception processing. Configure and maintain application integrations using SailPoint out-of-the-box connectors, JDBC, LDAP, Active Directory, REST, SOAP, flat file, and custom integration patterns. Support application onboarding activities including source analysis, account schema definition, entitlement model design, aggregation, correlation, manager mapping, provisioning policy configuration, and certification enablement. Develop and maintain SailPoint IIQ rules such as BuildMap, Correlation, Customization, Before Provisioning, After Provisioning, Workflow, Certification, Policy, Validation, and Task rules. Configure Lifecycle Manager capabilities including QuickLinks, access request forms, approval schemes, work items, provisioning workflows, birthright access, mover logic, and leaver deprovisioning. Develop and maintain IdentityIQ objects including applications, identities, identity attributes, managed attributes, roles, policies, populations, workgroups, email templates, forms, workflows, tasks, and configuration objects. Work with provisioning plans, account requests, attribute requests, entitlement requests, approval sets, work items, and manual fulfillment processes. Troubleshoot IdentityIQ issues using application logs, task results, workflow cases, provisioning transactions, debug pages, aggregation results, identity refresh outcomes, and connector responses. Validate and migrate IdentityIQ XML objects across development, test, UAT, pre-production, and production environments using approved change and release management processes. Collaborate with architects and application owners to define connector requirements, entitlement models, approval routing, provisioning behavior,