Who We AreAt Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.
The RoleAs a SailPoint IIQ Developer, you will contribute to the implementation, enhancement, and support of enterprise IAM and IGA capabilities using SailPoint IdentityIQ. You will design and maintain workflows, rules, forms, tasks, connectors, provisioning logic, and integration components required to support Joiner, Mover, Leaver, access request, approval routing, birthright provisioning, deprovisioning, manual fulfillment, and periodic access review processes.
The role requires strong understanding of the SailPoint IIQ object model, workflow engine, Lifecycle Manager capabilities, application onboarding patterns, entitlement management, identity correlation, account aggregation, provisioning plans, and certification processes. You will support integrations with authoritative sources such as HR systems, directory services such as Active Directory or LDAP, databases, REST or SOAP APIs, flat files, and enterprise applications using out-of-the-box or custom integration approaches.
You will also troubleshoot and optimize IIQ workflows, aggregation tasks, provisioning failures, identity refresh tasks, certification campaigns, policy violations, and custom rules. The candidate should be able to analyze logs, review task results, validate XML objects, test configuration changes, create deployment evidence, and ensure all customizations align with IAM governance, security, compliance, and operational requirements.
Key Responsibilities- Design, develop, configure, and support SailPoint IdentityIQ solutions for enterprise IAM and IGA use cases.
- Develop and customize IdentityIQ workflows for access requests, approvals, provisioning, deprovisioning, lifecycle events, escalation, rejection handling, manual fulfillment, and exception processing.
- Configure and maintain application integrations using SailPoint out-of-the-box connectors, JDBC, LDAP, Active Directory, REST, SOAP, flat file, and custom integration patterns.
- Support application onboarding activities including source analysis, account schema definition, entitlement model design, aggregation, correlation, manager mapping, provisioning policy configuration, and certification enablement.
- Develop and maintain SailPoint IIQ rules such as BuildMap, Correlation, Customization, Before Provisioning, After Provisioning, Workflow, Certification, Policy, Validation, and Task rules.
- Configure Lifecycle Manager capabilities including QuickLinks, access request forms, approval schemes, work items, provisioning workflows, birthright access, mover logic, and leaver deprovisioning.
- Develop and maintain IdentityIQ objects including applications, identities, identity attributes, managed attributes, roles, policies, populations, workgroups, email templates, forms, workflows, tasks, and configuration objects.
- Work with provisioning plans, account requests, attribute requests, entitlement requests, approval sets, work items, and manual fulfillment processes.
- Troubleshoot IdentityIQ issues using application logs, task results, workflow cases, provisioning transactions, debug pages, aggregation results, identity refresh outcomes, and connector responses.
- Validate and migrate IdentityIQ XML objects across development, test, UAT, pre-production, and production environments using approved change and release management processes.
- Collaborate with architects and application owners to define connector requirements, entitlement models, approval routing, provisioning behavior, certification scope, and operational handover needs.
- Support access certification campaigns, policy violation handling, role management, SoD controls, access review evidence, audit reporting, and compliance documentation.
- Prepare technical documentation including design notes, configuration guides, test evidence, deployment instructions, troubleshooting steps, and support handover documents.
Your Future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career. We have opportunities that you won't find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.
Who You AreYou're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.
Required Technical and Professional Expertise
- 7+ Years of experience Hands-on experience with SailPoint Identity IQ development, configuration, integration, deployment, and support.
- Strong understanding of IAM and IGA concepts including identity lifecycle management, access governance, access request, access certification, provisioning, deprovisioning, role-based access control, and segregation of duties.
- Experience developing or customizing IdentityIQ workflows using Business Process Editor, workflow XML, process variables, approval steps, rules, scripts, subprocesses, forms, and workflow library methods.
- Experience with application onboarding, account aggregation, entitlement aggregation, identity correlation, manager correlation, identity refresh, and provisioning configuration.
- Experience developing IdentityIQ rules using Java and BeanShell.
- Experience with rule types such as BuildMap, Correlation, Customization, Before Provisioning, After Provisioning, Workflow, Certification, Policy, Validation, and Task rules.
- Experience integrating IdentityIQ with systems such as Active Directory, LDAP, JDBC databases, REST APIs, SOAP services, web services, flat files, HR systems, and enterprise applications.
- Good understanding of provisioning plans, account requests, attribute requests, entitlement models, managed attributes, roles, policies, populations, workgroups, and access profiles.
- Ability to troubleshoot IIQ issues using logs, task results, workflow cases, debug pages, application configuration, aggregation outputs, and provisioning transaction details.
- Familiarity with IdentityIQ XML object management, object export/import, environment promotion, release management, and rollback planning.
- Understanding of access reviews, certification campaigns, policy violations, SoD controls, audit requirements, and compliance reporting.
- Working knowledge of SQL, XML, JSON, REST APIs, Java, BeanShell, application servers, and basic Linux or Windows operational commands.
- Ability to collaborate with IAM architects, application owners, business users, security teams, testing teams, and operations teams.
- Ability to follow secure development, documentation, change management, testing, release, and production support practices.
Preferred Skills and Experience- Experience with SailPoint IdentityIQ upgrade, patching, environment support, or performance tuning.
- Experience with custom connector development, advanced connector customization, or web service connector implementation.
- Experience with Lifecycle Manager configuration, access request customization, dynamic approval routing, and complex fulfillment patterns.
- Experience integrating with Active Directory, Microsoft Entra ID, LDAP, ServiceNow, HRMS platforms, database applications, cloud applications, and ticketing systems.
- Experience with workflow monitoring, task optimization, aggregation tuning, provisioning failure analysis, and operational reporting.
- Experience with certification campaign design, role mining, role modeling, policy configuration, SoD control implementation, and compliance reporting.
- Experience with source control and deployment tools for IdentityIQ XML objects, workflows, forms, rules, and configuration artifacts.
- Knowledge of cybersecurity and compliance frameworks such as ISO 27001, NIST, GDPR, audit control requirements, and evidence management.
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- SailPoint IdentityIQ certification or relevant IAM/IGA certification is required.
Being YouThe "Kyn" in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don't meet every requirement, we encourage you to apply. We believe in growth, and we're excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging - being a valued, respected, trusted member of the team - is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That's The Kyndryl Way.
What You Can ExpectYour career with us isn't just a job-it's an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health-because we know that when you feel your best, you do your best.
From your very first day, you'll dive into impactful work that powers the systems our customers rely on every day. You won't just contribute-you'll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.
We're here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you'll have everything you need to thrive and evolve. You'll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities-from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you'll be part of a culture that values empathy, restless learning, and a devotion to shared success.
We want you to thrive here-and we're committed to helping you do just that. Ready to make an impact? Join us and help shape what's next.
Get Referred! If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.
