**Description**
**Locations** : Onsite in Memphis, TN; Maryville, TN; Birmingham, AL; Lafayette, LA; New Orleans, LA; Charlotte, NC; Raleigh, NC; or Dallas, TX.
**Summary:**
We are seeking a Senior Identity & Access Management (IAM) Engineer to join the First Horizon team, specializing in SailPoint technologies. This role is for a Senior IAM Engineer specialized in SailPoint to lead the design, development, implementation, and administration of Identity and Access Management (IAM) solutions using SailPoint IdentityIQ and Identity Security Cloud. The ideal candidate will have extensive experience in identity lifecycle management, role-based access control (RBAC), integrations with enterprise applications, and security best practices.
As an Identity and Access Management Technology Engineer, you will play a key role in shaping our security landscape. Your expertise will be crucial in orchestrating application deployments, establishing robust connector configurations, and designing tailored rules to enhance our IAM structure. Collaborating with cross-functional teams, you'll contribute to workflow design, third-party system integrations, and the development of API services for streamlined access policy management.
**Key Responsibilities**
o SailPoint Platform Engineering: Lead design, configuration, and customization of SailPoint IdentityIQ and Identity Security Cloud (ISC), including connector configurations and custom rule development to optimize IAM processes.
o Lifecycle Management: Implement and support identity lifecycle workflows (joiner/mover/leaver), access request, provisioning and deprovisioning, and role management.
o Access Controls & Governance: Enhance and enforce RBAC, ABAC, least-privilege access, and segregation of duties practices. Support periodic access certifications and reviews to maintain compliance.
o Application Onboarding: Guide and execute onboarding of diverse applications into SailPoint, analyzing authorization models and designing provisioning solutions.
o Integrations & APIs: Design, develop, and maintain APIs/services for streamlined access management and facilitate third-party integrations.
o Workflow & Policy Design: Customize workflows, rules, forms, policies, and certifications, aligning governance processes with ever-evolving business requirements and regulatory needs.
o Monitoring & Troubleshooting: Oversee SailPoint health, lead incident response, and provide advanced troubleshooting for IAM-related issues in both project and production environments.
o SDLC Participation: Collaborate in full software development lifecycle, conduct User Acceptance Testing (UAT), and actively participate in defect resolution and deployment support.
o Documentation & Mentorship: Maintain up-to-date technical and operational documentation. Mentor junior team members and promote best practices throughout the IAM team.
o Continuous Improvement: Stay current on emerging identity technologies and trends, proactively proposing enhancements and automation opportunities.
**Required Skills & Experience**
o SailPoint Expertise: Minimum 3-5 years in SailPoint IdentityIQ/ISC engineering or development (configuration, lifecycle management, API integrations, application onboarding).
o IAM Depth: Strong background in Identity and Access Management concepts, with hands-on implementation of RBAC/ABAC, provisioning, access reviews/certifications, and security best practices.
o Integration Skills: Demonstrated proficiency in onboarding applications via connectors (LDAP, JDBC, REST, etc.), designing workflows, and developing custom rules.
o Programming/Scripting: Practical experience with relevant programming languages (Java, BeanShell, XML, RESTful APIs) utilized within SailPoint environments.
o Testing & SDLC: Proven record in supporting UAT, deployment, defect resolution, and maintaining application health.
o Compliance & Audit: Familiarity with regulatory frameworks (SOX, GLBA, GDPR, etc.) and their identity controls.
o Communication: Ability to clearly explain technical concepts to business leaders and cross-functional teams, facilitating effective change management and training.
o Proven Leadership: Experience leading projects or mentoring others in an enterprise IAM environment.
**Preferred Skills (nice-to-have)**
o SailPoint Cloud migration experience (IIQ to ISC/Project Apollo)
o Experience with other IAM platforms (e.g., Azure AD, CyberArk, Okta)
o Background in banking/financial industry identity governance
o Experience with role mining, SoD design, identity analytics or AI-enabled IAM
**About Us**
First Horizon Corporation is a leading regional financial services company, dedicated to helping our clients, communities and associates unlock their full potential with capital and counsel. Headquartered in Memphis, TN, the banking subsidiary First Horizon Bank operates in 12 states across the southern U.S. The Company and its subsidiaries offer commercial, private banking, consumer, small business, wealth and trust management, retail brokerage, capital markets, fixed income, and mortgage banking services. First Horizon has been recognized as one of the nation's best employers by Fortune and Forbes magazines and a Top 10 Most Reputable U.S. Bank. More information is available at ( .
**Benefit Highlights**
- Medical with wellness incentives, dental, and vision
- HSA with company match
- Maternity and parental leave
- Tuition reimbursement
- Mentor program
- 401(k) with 6% match
- More -- FirstHorizon.com/First-Horizon-National-Corporation/Careers/Our-Benefits
**Follow Us**
Facebook (
X formerly Twitter
LinkedIn (
Instagram
YouTube (
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.
For further information, please review the Know Your Rights ( notice from the Department of Labor.