Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this IT Security Operations (6152-1) role.
Rezi rewrites your resume against Tri-Force Consulting Services, Inc.'s job description. Free.
Tailor your resume to this IT Security Operations (6152-1) role.
Rezi rewrites your resume against Tri-Force Consulting Services, Inc.'s job description. Free.
Don't guess if your resume is good enough.
See how it scores against the IT Security Operations (6152-1) posting at Tri-Force Consulting Services, Inc. — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the IT Security Operations (6152-1) posting at Tri-Force Consulting Services, Inc. — free, in seconds.
About the Role
Responsible for designing, engineering, and modernizing enterprise identity governance capabilities across hybrid cloud and on-prem environments. This role blends deep SailPoint IdentityIQ and Identity Security Cloud development with IAM architecture leadership, including lifecycle automation, integration patterns, governance frameworks, and ServiceNow workflow orchestration.
Responsibilities
- Design, implement, and maintain SailPoint IIQ and ISC solutions
- Develop and automate workflows, connectors, and application onboarding
- Administer and support Microsoft Entra ID (Azure AD), including Privileged Identity Management (PIM)
- Integrate IAM systems with cloud platforms such as AWS, Azure, or GCP
- Implement and manage Okta solutions, with a focus on Citizen IAM and external user identity needs
- Conduct code reviews to eliminate redundancies and optimize system logic
- Identify and address IAM vulnerabilities early in the development process
- Collaborate with IT stakeholders and business owners to mature Role-Based Access Control (RBAC) and application onboarding programs
- Manage and integrate APIs, privilege access management (PAM) tools, SailPoint Access History, SailPoint Access Modeling and database platforms
- Test, deploy, and recommend patches and upgrades for IAM systems
- Migration from IIQ to ISC for the upcoming project
- Develop and maintain BeanShell rules, custom workflows, lifecycle event logic, task definitions, and plugin modules
- Engineer custom connectors, aggregation jobs, reconciliation logic, and provisioning adapters
- Build scalable application onboarding frameworks, entitlement schemas, and role models
- Implement and optimize certification campaigns, policy enforcement, SoD controls, and governance reporting
- Extend IIQ using Java, REST APIs, SCIM, and custom UI components
- Define and maintain end to end IAM architecture, including identity sources, directories, governance layers, and provisioning flows
- Architect scalable identity lifecycle frameworks supporting joiner/mover/leaver automation, authoritative source alignment, and attribute driven access
- Design integration patterns between SailPoint IIQ and ServiceNow, including access request workflows, automated ticket creation and closure, provisioning orchestration, incident and change management alignment, and catalog item governance and approval routing
- Establish RBAC/ABAC frameworks, role mining strategies, and access modeling standards
- Create architectural diagrams, data flow maps, and governance models for enterprise IAM programs
- Evaluate modernization opportunities (e.g., SailPoint SaaS, passwordless, adaptive risk, ServiceNow IAM modules)
- Lead design reviews, threat modeling sessions, and IAM roadmap planning with cybersecurity leadership
- Architect and implement integrations with Active Directory, LDAP, Azure AD/Entra ID, HR systems, cloud applications, and ServiceNow
- Develop REST/SOAP integrations, SCIM connectors, and custom provisioning logic
- Implement authentication and federation patterns using SAML, OAuth, OIDC, and MFA platforms
- Ensure directory hygiene, identity data quality, and lifecycle accuracy across systems
- Design and maintain ServiceNow IAM workflows, including access request, approval routing, and fulfillment automation
- Integrate SailPoint IIQ with ServiceNow for ticket based provisioning and deprovisioning, automated incident creation for provisioning failures, change management workflows tied to IAM operations, and catalog item governance and entitlement mapping
- Collaborate with ServiceNow platform owners to ensure alignment between IAM processes and enterprise workflow standards
- Optimize ServiceNow → SailPoint → downstream system orchestration for speed, accuracy, and auditability
- Support migration or redesign efforts when ServiceNow is used as a front end for IAM services
- Apply Zero Trust, least privilege, RBAC/ABAC, and governance principles to all IAM designs
- Engineer automated controls supporting SOX, HIPAA, ISO 27001, and NIST compliance
- Conduct root cause analysis for provisioning failures, connector issues, workflow errors, and performance bottlenecks
- Partner with security architects to align IAM architecture with enterprise cybersecurity strategy
- Support production IIQ environments, including break/fix, patching, upgrades, and performance tuning
- Maintain detailed technical documentation, architectural diagrams, and operational runbooks
- Collaborate with HRIS, infrastructure, ServiceNow, and application teams to resolve identity issues and improve lifecycle reliability
Requirements
- 5–9 years in IAM engineering
- 5–10+ years of SailPoint IdentityIQ development
- Strong proficiency in Java, BeanShell, XML, JSON, SQL, and REST API development
- Deep understanding of IIQ object model, connector frameworks, workflow engine, and plugin architecture
- Hands on experience architecting integrations between SailPoint IIQ and ServiceNow
- Strong knowledge of directory services, identity stores, and authentication protocols
- Expertise in identity governance concepts, RBAC/ABAC, SoD, and policy enforcement
- Familiarity with compliance frameworks (NIST)
Skills
- SailPoint IdentityIQ
- SailPoint Identity Security Cloud
- Okta
- Citizen IAM
- Microsoft Entra ID (Azure AD)
- Privileged Identity Management (PIM)
- AWS
- Azure
- GCP
- Java
- BeanShell
- XML
- JSON
- SQL
- REST API
- SCIM
- ServiceNow
- Active Directory
- LDAP
- SAML
- OAuth
- OIDC
- MFA
- Zero Trust
- RBAC/ABAC
- SoD
- SOX
- HIPAA
- ISO 27001
- NIST
- PAM
Location
- New York
Work Type
- On-site
- Full-time
Experience Level
- 5-9 years in IAM engineering
- 5-10+ years of SailPoint IdentityIQ development
About the Company
- Since 2000, Tri-Force Consulting Services has been an MBE/SDB certified IT Consulting firm in the Philadelphia region.
- Tri-Force specializes in IT staffing, software development (web and mobile apps), systems integration, data analytics, system automation, cybersecurity, and cloud technology solutions for government and commercial clients.
- Tri-Force works with clients to overcome obstacles such as increasing productivity, increasing efficiencies through automation, and lowering costs.
- Our clients benefit from our three distinguishing core values: integrity, diligence, and technological excellence.
- Tri-Force is a six-time winner among the fastest-growing companies in Philadelphia and a four-time winner on the Inc. 5000 list of the nation's fastest-growing companies.