Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you.
Learn how we are redefining the meaning of work , and be a part of the team raved by Clients, Job-seekers and Employees.
- Jobseeker Video Testimonials
- Employee Glassdoor Reviews
If you are aSailpoint Entra Professional looking for excitement, challenge and stability in your work, then you would be glad to come across this page.
We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.
Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution.
RequirementsSailPoint IdentityIQ / Identity Security Cloud
Expert-level understanding of SailPoint IdentityIQ (IIQ) and/or Identity Security Cloud (ISC), including architecture, identity profiles, sources, connectors, transforms, rules, workflows, lifecycle states, and access models.
Design and implement authoritative identity aggregation from Workday, SAP SuccessFactors, Active Directory, LDAP, and other HR systems.
Develop advanced identity correlation logic to prevent duplicate identities, incorrect account linking, orphan accounts, and identity collisions.
Configure identity lifecycle events covering joiner, mover, leaver, rehire, contractor conversion, leave of absence, and organizational transfers.
Design automated provisioning and deprovisioning across Active Directory, Microsoft Entra ID, SaaS applications, and on-premises systems.
Build complex access request workflows, approval chains, policy enforcement, segregation-of-duties controls, and emergency access processes.
Implement access certifications, campaign scheduling, reviewer escalation, remediation tracking, and audit reporting.
Troubleshoot aggregation failures, provisioning plans, connector exceptions, workflow failures, stale entitlements, and reconciliation inconsistencies.
Implement least-privilege access, role-based access control (RBAC), attribute-based access control (ABAC), and automated birthright access.
Optimize aggregation performance, provisioning throughput, identity refresh operations, and large-scale certification campaigns.
Advanced SailPoint skills expected:
Custom connector development and integration patterns.
Rule development and API-based automation where supported by the platform.
Debugging connector and provisioning failures using logs, traces, and API responses.
Safe promotion of configurations across development, testing, staging, and production.
Platform upgrade planning, regression testing, rollback strategies, and operational monitoring.
Architect complex integrations between SailPoint and Microsoft Entra ID for identity governance, access provisioning, and lifecycle automation.
Deep understanding of Entra users, groups, enterprise applications, app registrations, service principals, directory roles, administrative units, and tenant boundaries.
Integrate SailPoint with Microsoft Entra ID using supported connectors, Microsoft Graph API, SCIM, and custom REST integrations where appropriate.
Implement automated user creation, attribute updates, group assignment, access removal, and account disablement.
Manage dynamic groups, assigned groups, group-based licensing, nested group limitations, and application-specific access requirements.
Understand the differences between cloud-only identities, synchronized identities, hybrid identities, and externally managed identities.
Troubleshoot synchronization and attribute conflicts involving Microsoft Entra Connect Sync or Cloud Sync, Active Directory, and authoritative HR sources.
Design controls for privileged directory roles, emergency accounts, administrative access, and privileged identity management (PIM).
Integrate Conditional Access, MFA, authentication strengths, access reviews, and identity governance capabilities into the overall IAM control framework.
Manage application identities and non-human identities, including service principals, workload identities, credential rotation, and ownership reviews.
The candidate must be able to design, build, and troubleshoot production-grade API integrations.
Work extensively with Microsoft Graph REST endpoints, JSON payloads, HTTP status codes, pagination, filtering, batching, and delta queries.
Implement OAuth 2.0 client credentials and authorization-code flows where applicable.
Understand delegated versus application permissions, admin consent, least-privilege Graph permissions, and tenant-specific authorization.
Implement secure authentication using managed identities, certificates, or approved secrets-management solutions.
Develop PowerShell automation using Microsoft Graph PowerShell SDK and supporting tooling.
Handle throttling (429), transient failures, retry policies, exponential backoff, idempotency, and eventual consistency.
Diagnose permission errors, 403 Forbidden, 404 Not Found, conflicting updates, stale reads, and failed asynchronous operations.
Design API integrations that support audit logging, correlation IDs, monitoring, and safe recovery after partial failures.
Benefits
Skills Required
- 5-8 years of professional experience
- Expert-level experience with SailPoint IdentityIQ and/or Identity Security Cloud
- Experience with identity profiles, sources, connectors, transforms, rules, workflows, lifecycle states, and access models
- Experience designing authoritative identity aggregation from Workday, SAP SuccessFactors, Active Directory, LDAP, and other HR systems
- Experience developing identity correlation logic and lifecycle events for joiners, movers, leavers, rehires, contractors, leave of absence, and organizational transfers
- Experience implementing automated provisioning and deprovisioning across Active Directory, Microsoft Entra ID, SaaS applications, and on-premises systems
- Experience building access request workflows, approval chains, segregation-of-duties controls, emergency access processes, and access certifications
- Experience troubleshooting aggregations, provisioning plans, connector exceptions, workflows, stale entitlements, and reconciliation issues
- Knowledge of RBAC, ABAC, least-privilege access, and birthright access
- Experience with custom connector development, API automation, configuration promotion, platform upgrades, regression testing, and rollback strategies
- Advanced experience architecting SailPoint integrations with Microsoft Entra ID
- Deep knowledge of Entra users, groups, enterprise applications, app registrations, service principals, directory roles, administrative units, and tenant boundaries
- Experience integrating SailPoint with Entra using supported connectors, Microsoft Graph API, SCIM, and REST integrations
- Experience with cloud-only, synchronized, hybrid, and externally managed identities
- Experience with Entra Connect Sync or Cloud Sync troubleshooting
- Knowledge of privileged directory roles, emergency accounts, administrative access, PIM, Conditional Access, MFA, authentication strengths, and access reviews
- Experience managing service principals, workload identities, credential rotation, and ownership reviews
- Production experience with Microsoft Graph REST endpoints, JSON, HTTP status codes, pagination, filtering, batching, and delta queries
- Knowledge of OAuth 2.0 client credentials and authorization-code flows, delegated and application permissions, admin consent, and least-privilege permissions
- Experience developing PowerShell automation using Microsoft Graph PowerShell SDK
- Experience handling API throttling, transient failures, retry policies, exponential backoff, idempotency, and eventual consistency
- Experience implementing audit logging, monitoring, correlation IDs, and recovery from partial API failures
- Availability for a 0-30 day notice period or negotiable notice/buyout option
What We Do
Alignity is a Talent Solutions company focused on revolutionizing talent acquisition, employer branding, and performance inspiration to help organizations achieve accelerated growth.






