Sr. Lead, IGA Engineer - SailPoint ISC

Job ID:  16300  Alternate Locations:      Newell Brands is a leading consumer products company with a portfolio of iconic brands like Graco®, Coleman®, Oster®, Rubbermaid®, Sharpie® and Yankee Candle® - and 24,000 talented teammates around the world. Our culture is built on values in action: Integrity, Teamwork, Passion for Winning, Ownership, and Leadership. We work together to win, grow, and make a real impact—supported by a high-performing, inclusive, and collaborative environment where you can be your best, every day.     POSITION DETAILS   Position Title:  IGA Engineer – SailPoint ISC Location: Hybrid Reports To:  Darren Whitfield – Sr. Manager, IAM Security Department:  Information Security / Identity & Access Management Employment Type:  Full-Time   POSITION SUMMARY   We are seeking a seasoned and highly skilled IGA Engineer with deep, hands-on expertise in SailPoint Identity Security Cloud (ISC) to join our Identity & Access Management team. This is a subject matter expert (SME) role, not a generalist position — the successful candidate will have architected, built, and operated SailPoint ISC environments at scale and will be capable of leading complex implementation workstreams independently. The engineer will serve as the technical authority for our IGA platform, driving platform maturity, connector development, transform engineering, and integration across enterprise systems including SAP. This role demands proficiency in both the configuration and development dimensions of SailPoint ISC, including hands-on API/Postman-driven automation, BeanShell/Rule scripting, and transform authoring.   KEY RESPONSIBILITIES   Platform Architecture & Engineering

Serve as the SailPoint ISC platform SME, owning architecture decisions, platform roadmap contributions, and technical standards. Design, build, and optimize ISC configurations including source onboarding, provisioning policies, role modelling, and access profiles. Architect and implement entitlement management, separation of duties (SoD) controls, and least-privilege access (LPA) frameworks. Lead the design and delivery of joiner/mover/leaver (JML) lifecycle workflows and birthright access provisioning. Evaluate and implement SailPoint NERM (Non-Employee Risk Management) and ARM (Access Risk Management) capabilities.

Connector Development & Integrations

Develop, configure, and maintain connectors for SAP (HCM, ECC, GRC, S/4HANA, Ariba, Concur), Salesforce, IBMi, and other enterprise systems. Build and maintain SailPoint ISC SaaS Connectivity connectors using the Connector SDK and REST-based custom connectors. Design and implement Virtual Appliance (VA) configurations and cluster management for on-premises source connectivity. Integrate ISC with HR systems of record (e.g., Workday, SAP HCM) to drive authoritative source feeds.

Transform Engineering & Scripting

Author, test, and maintain SailPoint ISC transforms (Velocity, Seaspray, and rule-based) using Postman and the SailPoint ISC REST API. Use Postman collections to build, validate, and automate transform testing workflows and connector configuration management. Write and maintain BeanShell rules for complex provisioning logic, correlation, and identity attribute manipulation.

Access Governance & Compliance

Design, configure, and manage access certification campaigns including user access reviews (UAR), entitlement reviews, and role reviews. Maintain RBAC and ABAC frameworks, including role mining, role composition, and automated access assignment policies. Support audit and compliance activities related to SOX, GDPR, and internal IAM policy requirements. Partner with GRC and audit teams to ensure access controls meet regulatory and internal policy standards. Produce and maintain platform documentation, runbooks, and governance artefacts for audit readiness.

Collaboration & Technical Leadership

Act as the IGA technical