Fabletics is looking for a Sr. SailPoint Engineer to join our Identity Governance team's SailPoint Engineering group, working alongside other SailPoint Engineers to administer and evolve the SailPoint Identity Security Cloud / IdentityNow platform — including application onboarding, lifecycle automation, and ongoing improvements to MyAccess. This role will work independently and collaboratively across application integrations, RBAC design, and identity governance initiatives, partnering with IT Operations, Service Desk, HRIS/Workday, Security, and business stakeholders to keep identity processes reliable, auditable, and scalable.
How Do You Fit In?
The Sr. SailPoint Engineer is a key contributor to Fabletics' Identity & Access Management program, working as part of a team of SailPoint Engineers to configure, troubleshoot, and improve SailPoint. You'll take on application integration projects (including Workday), contribute to the design and rollout of an org-wide RBAC framework, and help diagnose and repair broken identity workflows — sometimes independently, sometimes in partnership with teammates on larger initiatives. This is a strong fit for someone who already has real SailPoint depth, works well both independently and as part of a collaborative engineering team, and wants meaningful input into how identity is modeled and secured company-wide.
What You Can Bring
- 3-5 years of hands-on experience administering a SailPoint IGA platform (Identity Security Cloud/IdentityNow required; IdentityIQ experience a plus), including access certifications, provisioning policies, and identity lifecycle workflows.
- Experience integrating SailPoint with Workday as an authoritative identity source — including HR-driven identity events (hire, transfer, termination, rehire), attribute mapping, and troubleshooting sync/integration failures between the two platforms.
- Experience building and integrating applications/sources into an IGA platform — connector configuration, entitlement mapping, aggregation, and correlation.
- Demonstrated ability to diagnose and fix broken or unreliable workflows — approval routing failures, stuck workflows, provisioning/deprovisioning failures, and aggregation issues — including root-cause analysis, not just one-off patches.
- Working knowledge of Role-Based Access Control (RBAC) theory — role mining, role hierarchies, least-privilege design, separation-of-duties — with the ability to contribute to designing or maturing an RBAC model in a live enterprise environment.
- Solid understanding of IAM concepts: users, groups, roles, entitlements, access requests, approvals, provisioning, deprovisioning, and certifications.
- Experience integrating SailPoint with Active Directory and Azure / Microsoft Entra ID.
- Experience configuring SCIM and REST API integrations, and building workflow automation.
- Ability to work independently on assigned initiatives as well as collaboratively within a team of SailPoint Engineers on larger projects.
- Experience partnering with application owners, auditors, and compliance stakeholders on access reviews.
- Strong communication skills with both technical and non-technical stakeholders.
- Foundational-to-intermediate AI literacy, with experience using generative AI tools to drive productivity in identity operations.
Preferred / Nice-to-Have Skills
- Experience with Microsoft Teams workflow-based approvals.
- Familiarity with ITSM tools such as Freshservice, Jira, or Microsoft Planner.
- Experience supporting SOX audits, access reviews, or compliance programs.
- Prior experience mentoring junior engineers or service desk staff on IAM concepts.
What You Will Be Doing
RBAC & Access Model Design
- Contribute to the design and organization-wide rollout of a Role-Based Access Control model — including role mining/role engineering, defining role hierarchies aligned to job functions, minimizing entitlement sprawl, and enforcing least-privilege and separation-of-duties principles.
- Partner with fellow SailPoint Engineers, application owners, and business stakeholders to translate job functions into governed roles.
Application Integrations & Workflow Reliability
- Work independently or with the SailPoint Engineering team on integrating new applications and sources into SailPoint/MyAccess — connector setup, entitlement mapping, aggregation testing, and account correlation.
- Support and troubleshoot the Workday-to-SailPoint integration, ensuring identity lifecycle events (hires, transfers, terminations, rehires) flow accurately and reliably; resolve sync failures and data mismatches.
- Diagnose and repair broken or unreliable workflows across the platform — approval routing failures, stuck approvals, provisioning/deprovisioning errors, and aggregation exceptions.
SailPoint / MyAccess Administration
- Configure and maintain applications, sources, access profiles, roles, governance groups, owners, and approvers within SailPoint Identity Security Cloud / IdentityNow (MyAccess), as part of the broader engineering team.
- Monitor SailPoint workflows, source aggregation jobs, and exception queues; support sandbox testing, production validation, and release documentation.
Onboarding, Offboarding & Lifecycle Automation
- Contribute to onboarding/offboarding process design for FTEs, retail users, contractors, and rehires, including identity lifecycle state logic and Workday-driven identity changes.
- Support accurate downstream provisioning/deprovisioning to Active Directory, Azure/Entra ID, and connected applications; help improve termination automation and post-termination access cleanup.
- Support retail automation flows including birthright access, group assignments, and promotion/demotion scenarios.
Monitoring, Audits & Certifications
- Monitor and remediate uncorrelated, orphaned, and duplicate accounts, stale access, and source mismatches.
- Support SOX-related access reviews, evidence collection, and certification campaigns; help clean up invalid access profiles, missing owners, and inactive approvers.
Documentation & Cross-Functional Collaboration
- Maintain documentation, runbooks, and troubleshooting guides for MyAccess processes, integrations, and the RBAC model.
- Collaborate with business users, application owners, HRIS, Security, IT Operations, Service Desk, and Retail IT, along with fellow SailPoint Engineers, to translate access requirements into SailPoint configuration.
Where we are:
- This role will be remote, with headquarters located in El Segundo, CA
Compensation & Total Rewards:
At Fabletics, we believe work and life should fit together! We continue to build a culture of flexibility, to empower you to do your best and put yourself first. Our Total Rewards program rewards employees for their hard work, supporting their health, well-being, families, and ultimately their life journey. Total Rewards at Fabletics includes:
-Hybrid Work Schedule*
-Discretionary Paid Time Off*
-Summer Fridays*
-Healthcare Plans
-Employee Discounts
-401k
-Annual Bonus Program
-Equity Program*
-And More
*Varied for retail, fulfillment and fully remote roles.
The annual base salary range for this position is from $94,446-$130,000. The range provided includes the base salary that Fabletics expects to pay for the role. Offered base salary will be dependent on factors including the scope and complexity of the role, candidate’s related work experience, subject matter expertise and work location.
#LI-JR1
#LI-Fabletics#LI-Remote
Security Alert: Protect yourself from scams
At Fabletics, we're dedicated to recruiting top talent who share our drive for innovation. To safeguard candidates, Fabletics emphasizes legitimate recruitment practices. Initial communication is primarily via official email addresses and LinkedIn; beware of deviations. Personal data and sensitive information will not be solicited during the application phase. Interviews are conducted via phone, in person, or through the approved platforms Teams or Zoom—never via messaging apps or other calling services. Offers are merit-based, communicated verbally, and followed up in writing. If personal information is requested to initiate the hiring process, rest assured it will be through secure and protected means.
Fabletics, Inc. is an equal opportunity employer. We recruit, employ, compensate, develop, and promote regardless of race, national origin, religion, sex, sexual orientation, gender identity, age, disability, genetic information, veteran status, and other protected status as required by applicable. At Fabletics, Inc., we champion a vibrant workplace culture that thrives on diversity law and do not tolerate discrimination or harassment. We are one team from many backgrounds, innovating through diversity of individuals, who are driven by passion for creating an inclusive space for all. Fabletics, Inc. will continue to champion a workplace culture that prizes diversity and inclusivity.
We encourage you to apply regardless of meeting all qualifications and/or requirements.
Skills Required
- 3-5 years of hands-on experience administering SailPoint Identity Governance and Administration platforms, with Identity Security Cloud or IdentityNow required
- Experience with SailPoint access certifications, provisioning policies, and identity lifecycle workflows
- Experience integrating SailPoint with Workday as an authoritative identity source, including hire, transfer, termination, and rehire events
- Experience building and integrating applications and sources into an IGA platform, including connector configuration, entitlement mapping, aggregation, and correlation
- Ability to diagnose and resolve workflow, approval routing, provisioning, deprovisioning, and aggregation failures through root-cause analysis
- Working knowledge of RBAC, role mining, role hierarchies, least-privilege design, and separation of duties
- Understanding of IAM concepts including users, groups, roles, entitlements, access requests, approvals, provisioning, deprovisioning, and certifications
- Experience integrating SailPoint with Active Directory and Azure or Microsoft Entra ID
- Experience configuring SCIM and REST API integrations and building workflow automation
- Ability to work independently and collaboratively on SailPoint engineering initiatives
- Experience partnering with application owners, auditors, and compliance stakeholders on access reviews
- Strong communication skills with technical and non-technical stakeholders
- Foundational-to-intermediate AI literacy and experience using generative AI tools for identity operations productivity
- Experience with Microsoft Teams workflow-based approvals
- Familiarity with ITSM tools such as Freshservice, Jira, or Microsoft Planner
- Experience supporting SOX audits, access reviews, or compliance programs
- Prior experience mentoring junior engineers or service desk staff on IAM concepts
- SailPoint IdentityIQ experience
Fabletics Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Fabletics and has not been reviewed or approved by Fabletics.
-
Wellbeing & Lifestyle Benefits — Generous product discounts and free clothing are widely cited as valuable perks, and corporate roles highlight extras like food, a stocked bar, and a casual dress code. These lifestyle benefits meaningfully enhance perceived total compensation.
-
Leave & Time Off Breadth — Corporate employees describe unlimited paid vacation days, while many roles mention paid holidays, vacation, and sick leave. Flexible scheduling is also noted in retail settings.
-
Healthcare Strength — Access to medical, dental, and vision coverage is described positively in multiple contexts. Life and disability coverage are also referenced as part of the package.
Fabletics Insights
What We Do
Founded in 2013, Fabletics brings the fashion-house approach into the activewear space. By fusing style-centric design with high-performance technology, we’ve evolved activewear beyond the gym, into every walk of life. Driven by our innovative VIP membership program serving over 2 million loyal members, we deliver premium quality at affordable prices with weekly new collections in sizes XXS-4X for women and XS-XXL for men. o Facebook: https://www.facebook.com/fabletics o Instagram: https://www.instagram.com/fabletics/ o Pinterest: https://pinterest.com/fabletics o Twitter: https://twitter.com/fabletics o YouTube: http://www.youtube.com/fabletics USA: http://www.fabletics.com Canada: http://www.fabletics.ca Germany: http://www.fabletics.de Spain: http://www.fabletics.es France: http://www.fabletics.fr UK: http://www.fabletics.co.uk Netherlands: http://www.fabletics.nl
