Jobs › Vizient

Sr Identity Access Management Engineer

Vizient · Chicago, IL · $77,400–$135,400 a year · Full time

Posted Aug 17, 2026 · We last checked this listing on Oct 5, 2026

Apply at Vizient

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about a SailPoint rule or workflow you wrote that solved a hard problem.

What they are checking: Whether they can write and debug custom logic when out-of-the-box configuration isn't enough.

Tell me about a time you led a complex IAM initiative across Security, Technology and business teams.

What they are checking: Whether they can provide technical leadership and keep many groups aligned on a long identity program.

What would you do

Audit finds terminated users who still had access to an application for two weeks. How do you respond?

What they are checking: Whether they can find the root cause, fix the gap and explain it clearly to Audit and Risk partners.

Managers complain that access reviews are too long and they just approve everything. What would you change?

What they are checking: Whether they can make certifications meaningful instead of a rubber stamp that only satisfies auditors on paper.

About the work

Walk me through how you've configured identity profiles, lifecycle states and transforms in SailPoint Identity Security Cloud.

What they are checking: Whether they have real hands-on depth in ISC configuration rather than only overseeing others who did the work.

What's different about building in IdentityIQ versus Identity Security Cloud, and how would you approach a migration between them?

What they are checking: Whether they understand both platforms well enough to plan a move without breaking provisioning or certifications.

How would you design joiner, mover and leaver processes so access changes the same day someone changes roles?

What they are checking: Whether they can automate lifecycle events reliably, which is where most access risk actually comes from.

How would you build a role model for an organization that has years of messy, one-off access grants?

What they are checking: Whether they can approach role mining realistically and avoid creating roles nobody can maintain.

How do you connect an on-premises application with no API to SailPoint for provisioning?

What they are checking: Whether they know practical options for hard integrations, like delimited files, JDBC or ticket-based provisioning.

How do you test changes to provisioning policies so you don't accidentally remove access from thousands of users?

What they are checking: Whether they respect the blast radius of identity changes and use safe testing and rollout practices.

Practice this interview out loud.

Offer builds a real interview for this exact role at Vizient from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Vizient.

When you’re the best, we’re the best. We instill an environment where employees feel engaged, satisfied and able to contribute their unique skills and talents while living and working as their authentic selves . We provide extensive opportunities for personal and professional development, building both employee competence and organizational capability to fuel exceptional performance through an inclusive environment both now and in the future. Summary: In this role, you will lead the design, implementation, and support of enterprise Identity and Access Management (IAM) solutions, with a primary focus on SailPoint Identity Security Cloud (ISC) and IdentityIQ (IIQ). You will deliver secure, scalable identity governance capabilities across cloud and on-premises environments, including identity lifecycle management, access governance, provisioning, role management, and system integrations. You will collaborate with Security, Risk, Audit, Technology, and business teams while providing technical leadership across complex IAM initiatives. Responsibilities: • Design, implement, configure, and maintain SailPoint Identity Security Cloud (ISC) and IdentityIQ (IIQ) solutions. • Develop and support identity profiles, lifecycle states, transforms, provisioning policies, workflows, rules, and access request processes. • Design and maintain identity lifecycle management processes, including joiner, mover, leaver (JML), provisioning, de-provisioning, and access changes. • Configure and support application onboarding, aggregation, reconciliation, identity correlation, and disconnected application integrations. • Develop integrations using SailPoint APIs, REST APIs, SCIM, Java, BeanShell, PowerShell, and related technologies. • Design and implement role-based access control (RBAC), attribute-based access control (ABAC), role mining, and role engineering solutions. • Lead access certification, segregation of duties (SoD), access governance, and risk-based identity control initiatives. • Support SailPoint IdentityIQ modernization and migration to SailPoint Identity Security Cloud, as applicable. • Partner with Security, Risk, Audit, Technology, and business teams to translate security, compliance, and technical requirements into scalable IAM solutions. • Implement governance controls and support audit and compliance requirements, including SOX, PCI-DSS, HIPAA, GDPR, ISO 27001, and NIST. • Lead technical delivery across IAM initiatives, including requirements, solution design, testing, deployment, risks, dependencies, and stakeholder communication. • Improve IAM processes, automation, security, and operational effectiveness while mentoring engineers and providing technical guidance across the team. Qualifications: • Relevant degree in Computer Science, Information Systems, Cybersecurity, Engineering, Business, or related technical field preferred. • 5 or more years of progressive Identity and Access Management (IAM) experience required. • 5 or more years of hands-on SailPoint Identity Security Cloud (ISC) and/or IdentityIQ (IIQ) implementation experience required. • Experience implementing identity lifecycle management, access certifications, access requests, provisioning and de-provisioning, role management, segregation of duties (SoD), and RBAC or ABAC models. • Experience configuring SailPoint connectors, identity profiles, transforms, correlation rules, workflows, provisioning policies, certification campaigns, and access governance capabilities. • Experience integrating IAM solutions with Active Directory, Microsoft Entra ID, LDAP, HR systems, cloud platforms, SaaS applications, and relational databases. • Experience developing and supporting IAM integrations using REST APIs, SCIM, Java/BeanShell, PowerShell, Python, SQL, or similar technologies. • Strong knowledge of IAM standards and technologies, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), federation, multi-factor authentication (MFA), and Zero Trust principles. • Experience delivering enterprise-scale IAM solutions and working across complex cloud and on-premises environments. • Experience with privileged access management technologies such as CyberArk, BeyondTrust, Delinea, or similar platforms preferred. • Experience with Okta, Microsoft Entra ID, SailPoint IdentityIQ-to-ISC migrations, enterprise RBAC, role mining, CI/CD practices, or related IAM technologies preferred. • SailPoint Identity Security Cloud Engineer or SailPoint IdentityIQ Engineer Certification highly preferred; additional identity, cloud security, cybersecurity or information security certifications preferred. #LI-JB1 #IDS Estimated Hiring Range: At Vizient, we consider skills, experience, and organizational needs in our compensation approach. Geographic factors may adjust the range estimate and hires typically fall below the top range. Compensation decisions are tailored to individual circumstances. The current salary range for this role is $77,400.00 to $135,400.00. This position is also incentive eligible. Vizient has a comprehensive benefits plan! Please view our benefits here: http://www.vizientinc.com/about-us/careers Equal Opportunity Employer: Females/Minorities/Veterans/Individuals with Disabilities The Company is committed to equal employment opportunity to all employees and applicants without regard to race, religion, color, gender identity, ethnicity, age, national origin, sexual orientation, disability status, veteran status or any other category protected by applicable law.

Apply at Vizient