IT CanvassTalk to an advisor
๐Ÿ’ผ SailPoint roles

SailPoint jobs

Roles for SailPoint specialists from vetted employers. We list a vacancy only once it is confirmed.

SailPoint roles are identity governance roles. The work is connecting systems to IdentityIQ or Identity Security Cloud, modelling roles and access, running certification campaigns and provisioning, and writing the rules and workflows that make a tenant behave the way the business needs.

SailPoint roles and what they do day to day

IdentityIQ Developer or Engineer

Onboards applications through connectors, writes BeanShell rules for correlation, provisioning and attribute logic, builds workflows and forms, and debugs aggregation and provisioning failures from task results and logs.

Skills employers ask for: Connectors and aggregation, BeanShell rules, Workflows and forms, Provisioning plans.

Learn it: IdentityIQ (Associate and Engineer), Developer (Certified IdentityIQ Engineer)

Identity Security Cloud Engineer

Configures sources, transforms, access profiles and roles in the SaaS tenant, builds workflows and API integrations, and runs campaigns and lifecycle events without the server access an IdentityIQ engineer has.

Skills employers ask for: Sources and transforms, Access profiles and roles, Workflows and the REST API, Lifecycle events.

Learn it: Identity Security Cloud (Certified Engineer)

IAM Consultant or Analyst

Gathers access requirements from application owners, designs the role model and certification schedule, runs campaigns, handles remediation, and produces the evidence an audit asks for.

Skills employers ask for: Role modelling and RBAC, Certification design, Segregation of duties policy, Audit evidence.

Learn it: IGA foundations (Identity Security Leader)

IAM Administrator

Runs the day-to-day of a live deployment: scheduled tasks, failed aggregations, access requests stuck in approval, password and lifecycle tickets, and small configuration changes.

Skills employers ask for: Task scheduling and monitoring, Access request handling, Identity attributes and correlation, Basic rule reading.

Learn it: IdentityIQ (Associate and Engineer)

IAM Architect

Designs the integration landscape, the role and policy model and the deployment topology, decides between IdentityIQ and Identity Security Cloud for a customer, and owns performance and upgrade planning.

Skills employers ask for: Deployment topology, Role and policy architecture, Integration design, Performance.

Learn it: Architect readiness

What SailPoint roles pay, with the source

Payscale reports SailPoint IdentityIQ as a skill rather than a job title, so there is no split by role or experience to quote. Base salary only. Figures are quoted as the source publishes them, read on 14 September 2026.

MarketMeasured asAverage baseRange and experienceSource
IndiaJobs with SailPoint IdentityIQ skillsโ‚น8,30,000 a yearNo breakdown publishedPayscale42 salary profiles, updated 8 December 2025
United StatesJobs with SailPoint IdentityIQ skills$99,000 a yearNo breakdown publishedPayscale73 salary profiles, updated 8 July 2026

Who hires SailPoint people

  • Identity and security consultancies and the identity practices inside the large system integrators. Most engineer and consultant roles sit here, often on multi-customer delivery teams.
  • Regulated enterprises that run their own governance programme: banks, insurers, healthcare, energy and telecoms. These are administrator, analyst and engineer roles inside an IAM or security team.
  • SailPoint itself and its managed-service partners, for professional services and support.

What each level is expected to know

Fresher, 0 to 1 year

The identity model: identity versus account, aggregation versus provisioning, what a role and an entitlement are, and how a certification campaign works. Java basics, because rules are BeanShell. The IdentityIQ Associate credential is the entry proof.

2 to 5 years

You have onboarded applications end to end, written and debugged correlation and provisioning rules, built a workflow, and fixed a failed aggregation from the task result. The Certified IdentityIQ Engineer or Identity Security Cloud Engineer credential is the usual proof.

Architect, 6 years and beyond

Design of the whole landscape: role and policy model, connector strategy, topology and performance, and the judgement to tell a customer when a rule is the wrong answer. Architect-level credentials and a record of leading deployments.

Open SailPoint roles

No SailPoint roles listed right now

We list roles as employers bring them to us, and only once the vacancy is confirmed. Tell us what you are looking for and we will get in touch when something matching comes in.

โ† Back to all jobs