> Markdown version of [/jobs/ext/2105155-sailpoint-isc](https://www.wearedevelopers.com/jobs/ext/2105155-sailpoint-isc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SailPoint ISC - **Company:** Kaygen Inc. - **Location:** Los Angeles, CA, United States - **Contract:** Temporary contract - **Skills:** JavaScript (Programming Language), Active Directory, Application Programming Interfaces (APIs), Cloud Computing Security, Data Normalization, Microsoft Exchange Server, Identity and Access Management, Microsoft Office, OAuth, Windows PowerShell, Azure Active Directory, Data Streaming, Systems Integration, User Provisioning Software, Scripting, Enterprise Integration, SailPoint, BeanShell, Api Management, Workday, Servicenow, User Accounts - **Published:** August 18, 2026 - **Apply:** https://www.dice.com/job-detail/2f527941-9684-46d6-9c47-b7c85d25d5ab ## About the Role Experience with SailPoint (or any other Identity Governance and Administration solution) and Microsoft Entra. Experience managing Joiner-Mover-Leaver (JML) processes. Experience troubleshooting provisioning and aggregation failures. Strong understanding of identity lifecycle management and security frameworks. Familiarity with hybrid Exchange environments and Office 365 services. Deep operational expertise with Microsoft Active Directory Services (Forest/Domain architecture, GPO application, trust relationships) and Azure AD/Microsoft Entra ID schemas. Hands-on experience administering Microsoft Exchange Online and hybrid Exchange environments, including mailbox management, distribution groups, mail flow, transport rules, delegation, retention, archive, and PowerShell automation. Proven implementation history with SailPoint Identity Security Cloud (ISC) and NERM. Strong capabilities in scripting languages (PowerShell, JavaScript, or BeanShell) used for building custom enterprise integration ## Description * The contractor will manage, implement, and improve the identity and asset ecosystem across the following core platforms: * SailPoint Identity Security Cloud (ISC) and NERM * Active Directory (AD) On-Premises * Azure Active Directory (Azure AD / Microsoft Entra ID) * Microsoft Exchange Online / Exchange Server Hybrid Messaging, Microsoft Exchange Online / Hybrid Messaging Operational Tasks Automate non-employee identity creation, sponsor tracking, lifecycle transitions, and downstream birthright access provisioning. Support automated onboarding and offboarding processes. Implement workflow enhancements for employee status changes. Monitor and manage the entire SailPoint ISC environment including integrations with Workday, Active Directory, Azure AD, and SailPoint. Create and update approval workflows and policies. Review and resolve identity lifecycle processing errors. Monitor account aggregation jobs and connector health. Troubleshoot provisioning and deprovisioning failures. Integrate an inbound data feed driven directly by a ServiceNow Request payload into SailPoint NERM to automate Contractor onboarding. SailPoint ISC Architect, configure, and deploy the native SailPoint Azure AD direct connector to replace or augment legacy synchronization pathways. Configure secure OAuth 2.0 API integrations via Microsoft Graph API. Establish data aggregation schedules, attribute mappings, and account correlation rules to ensure zero downtime. Azure AD Direct Connector Deployment to SailPoint ISC Health & Directory Maintenance: Monitor, troubleshoot, and remediate health issues within the on-premises AD environment related to object corruption, duplication, or sync latencies affecting downstream IAM tools. Organizational Unit (OU) & Object Management: Restructure, cleanup, and standardize OU architecture, managed service accounts (MSAs), and security groups to facilitate accurate automated provisioning. Group Policy Object (GPO) Alignment: Review and adjust GPOs impacting user provisioning, login scripts, and local profile creation to eliminate conflicts with SailPoint-driven access models. Nested Group Rationalization: Audit and remediate highly nested security groups causing token bloat or unmapped access privileges during automated SailPoint entitlement aggregations. Sid-History and Schema Attribute Audits: Remediate legacy security identifier (SID) histories and validate schema extensions required for advanced attribute matching across hybrid infrastructures. Scope of Work: The contractor will focus on high-complexity implementation, onboarding new platform modules, and root-cause analysis of systemic integration friction. Day-to-day work involves minimal low-volume ticket queues, prioritizing long-term stabilization over transactional ticket closure. ## Related Videos - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Destigmatizing the Workplace: Building Real Inclusion](https://www.wearedevelopers.com/videos/1492-destigmatizing-the-workplace-building-real-inclusion) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [WeAreDevelopers LIVE - How DevRel Makes Tech More Human](https://www.wearedevelopers.com/videos/2149-wearedevelopers-live-how-devrel-makes-tech-more-human) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 119 - ❤️ === ❤️](https://www.wearedevelopers.com/magazine/454-dev-digest-119)