SailPoint Identity Security Cloud Engineer Training
Master SailPoint's SaaS platform (formerly IdentityNow): sources and connectors, JSON transforms, identity and access profiles, roles, certifications and provisioning, built in a real tenant, toward the Certified Identity Security Engineer credential.
SailPoint Identity Security Cloud Engineer training teaches you to implement SailPoint's SaaS identity platform, formerly IdentityNow. You work with sources and connectors, JSON transforms, identity profiles, access profiles and roles, certifications and the SaaS provisioning model, plus REST APIs and event triggers, aligned to the role-based Certified Identity Security Engineer credential (the Certified Identity Security Administrator credential is the level below).
Who this course is for
Prerequisite: No IAM background required. Understanding of IdentityIQ concepts helps but is not required.
What makes this different
You build, not just watch
From the first session you are on your own developer instance, configuring, scripting and breaking things safely. That is what makes it stick.
Taught on the current release
No outdated screenshots. Everything maps to the release SailPoint runs today, including current AI and platform features.
One trainer who still implements
One working consultant for the whole batch, no rotation, so the teaching is consistent and grounded in real projects.
Support continues to the offer
Resume review, mock interviews on real scenario questions, and referrals. Support does not stop when the last class ends.
Curriculum
7 modules and 3 projects, updated to the current release. Every module maps to real Identity Security Cloud Engineer work and expands into its full topic list, practised on a live developer instance.
SailPoint Identity Security Cloud Engineer Training module list: 7 modules, what each one covers, and how many topics it expands into. Full topic lists are in the accordions below.
| # | Module | What you configure | Topics |
|---|---|---|---|
| 01 | Identity Security Cloud foundations | Understand the SaaS platform, how it differs from IdentityIQ, and where the Administrator and Engineer certs sit. | 7 |
| 02 | Sources & connectors | Bring account and entitlement data into the tenant reliably through the VA cluster. | 8 |
| 03 | Transforms & identity profiles | Shape identity data with declarative JSON transforms instead of the rules you would write in IIQ. | 7 |
| 04 | Access model | Build the entitlement, access-profile and role model that powers requests and reviews. | 7 |
| 05 | Certifications & provisioning | Run SaaS access reviews and fulfil access through the cloud provisioning model. | 7 |
| 06 | APIs, events & extensibility | Extend the platform with REST APIs, event triggers and the limited rules ISC still uses. | 7 |
| 07 | Capstone & Engineer prep | Configure a tenant end to end and get exam-ready for the Certified Identity Security Engineer. | 6 |
1Identity Security Cloud foundations
Understand the SaaS platform, how it differs from IdentityIQ, and where the Administrator and Engineer certs sit.
- The SaaS platform and multi-tenant model
- ISC versus IdentityIQ: what changes and what carries over
- The virtual appliance and connectivity
- Tenant structure, orgs and navigation
- Governance concepts in the cloud
- Admin roles, personas and access
- Administrator versus Engineer certification scope
2Sources & connectors
Bring account and entitlement data into the tenant reliably through the VA cluster.
- Onboarding sources
- Account and entitlement aggregation
- Connectivity options and the VA cluster
- Flat file and direct connectors
- Account schema and attributes
- Unstructured and delimited sources
- Troubleshooting source connectivity
- Scheduling and monitoring aggregations
3Transforms & identity profiles
Shape identity data with declarative JSON transforms instead of the rules you would write in IIQ.
- JSON transforms versus IIQ rules
- Common transform operations and nesting
- Identity profiles and attribute mappings
- Authoritative source configuration and precedence
- Preview, test and debug transforms
- Identity exceptions and cleanup
- Seaspray and transform-versus-rule decisions
4Access model
Build the entitlement, access-profile and role model that powers requests and reviews.
- Entitlements and access profiles
- Roles in ISC and role composition
- Access request configuration
- Approval workflows
- Access recommendations and AI-driven insights
- Governance groups
- Requestability and access criteria
5Certifications & provisioning
Run SaaS access reviews and fulfil access through the cloud provisioning model.
- Certification campaigns in ISC
- The SaaS provisioning model
- Separation of duties (SoD)
- Provisioning policies and forms
- Search, saved searches and reporting
- Password management and self-service
- Reassignment and delegation
6APIs, events & extensibility
Extend the platform with REST APIs, event triggers and the limited rules ISC still uses.
- The ISC REST APIs (v3 and beta) overview
- Personal and client credential access tokens
- Event triggers and webhooks
- Rapid Setup and connector customisation
- Rules in ISC (where still used)
- Integration patterns and ETS
- Preparing for the Identity Security Expert credential
7Capstone & Engineer prep
Configure a tenant end to end and get exam-ready for the Certified Identity Security Engineer.
- End-to-end tenant configuration
- Source onboarding with transforms
- Access profile and role model
- Certification and provisioning run
- Certified Identity Security Engineer exam domains
- Practice and mock review
What you'll be able to do
Real projects you'll build
Interview-ready scenarios on a live instance, not toy demos.
Source onboarding + transforms
Onboard a source, aggregate accounts and build JSON transforms that shape identity attributes cleanly.
Access profile & role model
Design access profiles and a role, then request and approve access through the portal.
Certification campaign
Run a certification in ISC and drive revocations through the SaaS provisioning model.
Certification and hands-on
Every session runs on a real SailPoint developer instance, so you configure and build rather than watch. The course maps to the Certified Identity Security Engineer exam and finishes with an IT Canvass certificate plus a certification roadmap. IT Canvass does not issue the official SailPoint credential.
The SailPoint program has two tracks. Knowledge Credentials are training-based and unlock an exam: Identity Security Leader (free, product-agnostic foundation), Identity Security Professional, and Identity Security Expert. Role-based Professional Certifications are proctored and recommend real hands-on experience: for on-premise IdentityIQ, Certified IdentityIQ Associate then Certified IdentityIQ Engineer; for cloud Identity Security Cloud, Certified Identity Security Administrator then Certified Identity Security Engineer. Exams run about US$300 to US$400.
Certification facts. Vendor figures change, so confirm against the official SailPoint catalogue before booking.
| Exam code | SailPoint University does not publish short exam codes; the credential name below is the identifier |
|---|---|
| Credential | SailPoint Certified Identity Security Engineer |
| Issued by | SailPoint Technologies (not by IT Canvass) |
| Exam duration | 120 minutes |
| Exam cost | Bundled with SailPoint University training; priced per learning path |
| Prerequisite | Product training through SailPoint University, plus implementation experience. |
| What IT Canvass issues | An IT Canvass course completion certificate and a certification roadmap |
Your Identity Security Cloud Engineer career roadmap
Five stages on the SailPoint SaaS (Identity Security Cloud) track, with indicative 2026 bands.
Salary snapshot: Identity Security Engineer
Indicative ranges aggregated from public salary data. Actual pay varies by location, employer and experience.
How IT Canvass compares
Against a typical training provider, this Identity Security Cloud Engineer course is taught on the current SailPoint release, gives you your own developer instance from day one, and keeps one working consultant for the whole batch instead of rotating trainers. Every module is mapped to the Certified Identity Security Engineer exam, sessions are recorded with lifetime access, and job support (resume review, mock interviews and referrals) is included in one transparent fee. Most providers still teach older release material, run slide-first sessions with limited lab time, and bill support and recordings as add-ons.
Fees and training modes
Choose how you want to learn Identity Security Cloud Engineer. No-cost EMI available on all modes.
Interactive live batches, weekday or weekend, with the full cohort and lifetime recordings.
Private one-on-one coaching at your pace, whether you need interview-ready fast or hands-on help with your current project.
Learn on your own time with recorded sessions, labs and Q&A doubt support.
Train your team on Identity Security Cloud Engineer
Tailored curriculum, flexible scheduling, a dedicated SailPoint architect, and progress reporting for your managers. Delivered live online or on-site for cohorts of any size.
Your trainer
Neelima, SailPoint Architect, 12+ years
I still deliver SailPoint IdentityIQ and Identity Security Cloud implementations for enterprise clients, so I teach from what is breaking in production this quarter, not from a slide deck. In class I show the connector, rule, workflow and certification patterns that scale and the mistakes that cost teams days.
Learner reviews
JSON transforms clicked fast because we built them in a real tenant. The SaaS model is genuinely different and this taught it well.
Moving from IdentityIQ, this bridged the gap to the cloud platform cleanly.
Sources, access profiles and certifications end to end. Exactly the SaaS skills employers ask for.
Fees, batches and policies
The questions people actually ask before enrolling, answered plainly.