SailPoint IIQ/ ISC Solution Architect (Contract)

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.

With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.

We Deliver Comprehensive Solutions Across IAM Domains, Including

• Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)
• Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.

If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success.

We are currently looking for a SailPoint Solution Architect (IIQ & ISC) to join KeyData’s Delivery team! In this role, you will be responsible for leading the architecture, design, advisory, and implementation of SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC) solutions for enterprise customers. You will serve as a trusted advisor, helping organizations mature their identity governance programs, modernize identity security capabilities, and implement scalable identity architectures aligned with business and security objectives. This role combines deep technical expertise across SailPoint platforms with strategic advisory, solution architecture, and hands‑on delivery leadership to drive successful identity transformation initiatives. If you're passionate about working in an environment where you can experience accelerated growth, development, and high impact, this role could be for you!

Location: Canada

Employment Type: 12 months contract, Remote

Vacancy Status: High Priority, Immediate Opening: This position is currently available, and hiring is underway.

What You’ll Do

• Lead architecture, design, and implementation of SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC) solutions
• Serve as a trusted advisor to customers and implementation partners on identity governance, access management, and identity security programs
• Assess customers’ current identity landscape and develop strategic IAM and IGA roadmaps
• Gather business requirements and translate them into scalable SailPoint solution designs
• Design and implement identity lifecycle management, provisioning, access requests, certifications, role management, and governance processes
• Architect Role-Based Access Control (RBAC) models and enterprise application onboarding programs
• Lead onboarding of SaaS, cloud, API‑based, and enterprise applications into SailPoint platforms
• Design and implement integrations using SailPoint connectors, REST APIs, SCIM, web services, LDAP, and enterprise integration technologies
• Architect integrations with Active Directory, Azure AD/Entra ID, Workday, ServiceNow, SAP, HR systems, and other enterprise applications
• Configure and optimize Identity Profiles, Access Profiles, Roles, Lifecycle States, Governance Groups, Workflows, Transforms, and Identity Governance processes
• Design and implement certification campaigns, access reviews, policy governance, and compliance controls
• Educate customers and partners on SailPoint architecture, implementation methodologies, and industry best practices
• Conduct solution workshops, architecture reviews, technical advisory sessions, and roadmap discussions
• Review and guide custom development, rules, workflows, integrations, and extensibility solutions
• Advise customers on customization approaches, platform capabilities, and implementation trade‑offs
• Identify product adoption gaps and recommend strategies to maximize platform utilization and governance maturity
• Develop architecture documentation, implementation strategies, governance frameworks, and operational runbooks
• Mentor consultants, engineers, and implementation teams on SailPoint and IAM best practices
• Collaborate with delivery, engineering, security, and customer stakeholders to ensure successful project outcomes

Who We’re Looking For

• 8+ years of experience in IAM, Identity Governance, Cybersecurity Consulting, or Enterprise Identity Architecture
• Minimum 5+ years of hands‑on experience implementing SailPoint IdentityIQ (IIQ), SailPoint Identity Security Cloud (ISC), or both
• Strong experience architecting and implementing SailPoint identity governance solutions in enterprise environments
• Expertise in identity lifecycle management, provisioning, certifications, access governance, role management, and compliance controls
• Experience with SailPoint IIQ configuration, customization, workflows, rules, application onboarding, and integrations
• Experience with SailPoint ISC components including Identity Profiles, Access Profiles, Roles, Governance Groups, Lifecycle States, Workflows, and Transforms
• Strong understanding of RBAC, ABAC, Segregation of Duties (SoD), least‑privilege access, and identity governance principles
• Experience onboarding applications using SailPoint connectors, APIs, SaaS integrations, and custom integration frameworks
• Hands‑on experience with REST APIs, SCIM, XML, SOAP/SPML, LDAP, JSON, and enterprise integration technologies
• Experience with Java, BeanShell, JavaScript, PowerShell, or other scripting and development technologies
• Experience integrating SailPoint with Active Directory, Azure AD/Entra ID, Workday, SAP, ServiceNow, HR systems, and cloud applications
• Experience performing identity maturity assessments and defining strategic IAM roadmaps
• Strong communication, consulting, presentation, and stakeholder management skills
• Experience leading customer‑facing architecture and implementation engagements
• Bachelor's degree in Computer Science, STEM, Information Technology, Engineering, or related field preferred
• English language proficiency required

Nice‑to‑Have Skills

• SailPoint Certified Engineer, IdentityIQ Engineer, or Identity Security Cloud (ISC) certification
• Experience working across both SailPoint IdentityIQ and Identity Security Cloud platforms
• Experience with AWS, Azure, and GCP cloud environments
• Experience with SailPoint Workflows, Transforms, AI‑driven governance capabilities, and advanced analytics
• Knowledge of identity threat detection, governance reporting, and compliance frameworks
• Experience with DevOps, CI/CD pipelines, Infrastructure‑as‑Code, or Terraform
• CISSP, TOGAF, or other security and architecture certifications
• Experience leading enterprise IAM modernization, cloud migration, or identity transformation initiatives
• Experience mentoring technical teams and driving IAM governance best practices across organizations

Compensation

The hourly rate range for this position is $70–$77 CAD per hour. The final rate will be determined based on the candidate’s experience, overall fit for the role, and expected ramp‑up time. This is a 12-month, full-time contract role, working 40 hours a week. At KeyData Cyber, we are committed to fair and competitive compensation. We regularly benchmark across positions, industries, sectors, and experience levels, ensuring our approach recognizes each person’s unique strengths, contributions, and the value they bring to the organization.

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work‑life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition, and we will make all reasonable efforts to accommodate your request.

Fraud Prevention & Identity Verification

We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process.