Sr. Staff Systems Engineer – Identity Governance & Access (SailPoint / Microsoft Entra ID)

Where You Come In

• Serve as the technical owner and lead engineer for SailPoint Identity Security Cloud (ISC), overseeing tenant configuration, virtual appliances and IQService, identity profiles, transforms, rules, provisioning policies, and deployment activities across environments.
• Lead Dexcom’s SailPoint ISC implementation, partnering closely with implementation vendors to validate architecture, approve technical designs, drive testing efforts, and ensure successful knowledge transfer for long-term platform ownership.
• Design and support identity lifecycle automation by managing SailPoint-to-Workday integrations, Joiner/Mover/Leaver processes, and application onboarding across Active Directory, Microsoft Entra ID, Okta, SaaS platforms, databases, and REST/SCIM-connected systems.
• Configure and enhance identity governance capabilities, including access requests, ServiceNow integrations, role-based access controls, access certifications, separation-of-duties policies, and governance processes for workforce, external, and non-human identities.
• Serve as a subject matter expert for Microsoft Entra ID, providing technical leadership in hybrid identity, single sign-on, provisioning, Conditional Access, phishing-resistant MFA, Privileged Identity Management, and Identity Protection.
• Provide expert guidance on enterprise Active Directory services, including directory architecture, Group Policy, Certificate Services, Kerberos security, privileged access strategies, and service account management.
• Champion a security-first, Zero Trust approach to identity management by enforcing least-privilege access, supporting identity threat detection and response, and partnering with Information Security to meet audit and compliance requirements.
• Leverage APIs, scripting, automation, configuration-as-code practices, and AI-powered tools to streamline identity operations, improve efficiency, and advance governance capabilities for both human and non-human identities.
• Operate the IGA platform as a highly available service by establishing monitoring, reporting, service levels, operational processes, and serving as the highest technical escalation point for identity-related incidents.
• Provide technical leadership across IT Core Services by mentoring engineers, leading design reviews, presenting solutions to architecture and change advisory boards, and establishing identity engineering standards, documentation, and best practices.

What Makes You Successful

• Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent professional experience.
• Extensive experience in systems engineering with deep expertise in Identity & Access Management (IAM) and Identity Governance & Administration (IGA).
• Hands-on experience leading enterprise SailPoint implementations and expert knowledge of SailPoint Identity Security Cloud, including identity lifecycle management, workflows, certifications, provisioning, integrations, and automation.
• Successfully integrated SailPoint with Workday and other enterprise platforms to automate Joiner, Mover, and Leaver processes at scale.
• Advanced expertise in Microsoft Entra ID, Active Directory, hybrid identity, single sign-on, provisioning, Conditional Access, and Privileged Identity Management.
• Strong security mindset and experience implementing Zero Trust principles, least-privilege access models, privileged access controls, and identity security best practices.
• Deep knowledge of identity standards and protocols, including SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, and role-based access controls.
• Strong scripting and integration skills using technologies such as PowerShell, Python, JavaScript, Microsoft Graph, REST APIs, and SQL.
• Experience supporting identity governance programs in regulated environments and partnering with compliance, audit, and security teams to meet SOX, HIPAA, GDPR, ISO 27001, and similar requirements.
• Effectively manage implementation partners, influence stakeholders, mentor engineers, and communicate complex technical concepts to both technical and business audiences.
• Additional value through experience with Okta, CyberArk, Microsoft Defender for Identity, Microsoft Sentinel, cloud identity platforms, and non-human identity governance, including service accounts and AI agents.
• Experience leveraging AI-powered tools and automation technologies, such as Microsoft 365 Copilot, GitHub Copilot, OpenAI ChatGPT, and related solutions, to enhance productivity and engineering outcomes.
• Hold or are able to obtain industry-recognized certifications such as SailPoint ISC, Microsoft SC-300, SC-100, CISSP, CISM, or CCSP.
• Thrive in regulated, fast-paced environments and have experience working within Agile and Scrum delivery models.

Travel Required: 15–25%

Experience and Education Requirements: Typically requires a Bachelor’s degree in a technical discipline, and a minimum of 13+ years related experience or a Master’s degree and 8+ years equivalent industry experience or a PhD and 5+ years of experience.

Remote Workplace: Your location will be a home office; you are not required to live within commuting distance of your assigned Dexcom site (typically 75 miles/120km). If you reside within commuting distance of a Dexcom site (typically 75 miles/120km) a hybrid working environment may be available.