Navigate the site
Certified SailPoint developers who deliver connectors, rules, role models, and certification campaigns in production-grade IGA programmes.
A SailPoint Developer is the platform-internal specialist who lives inside IdentityIQ or IdentityNow at the code and configuration level. The role exists because SailPoint platforms ship with extensibility surfaces — rules, transforms, custom connectors, workflows, REST APIs — that an enterprise programme will exercise heavily once the out-of-the-box configuration runs out of expressiveness. A team without genuine SailPoint Developer depth tends to hit a ceiling around the third major application onboarding, when the limits of the configuration UI start to show.
The day-to-day work splits across several rhythms. Connector work is bursty and milestone-driven: when a new application comes into scope, the developer spends a focused two-to-six-week sprint designing the integration, building the connector (sometimes a SailPoint OOTB connector with custom configuration, sometimes a fully bespoke REST or JDBC connector), modelling its entitlements as governable access profiles, and integrating with provisioning workflows. Rule work is more steady-state: writing or tuning BeanShell and newer Java rules to handle attribute logic, certification customisation, policy violations, and lifecycle event handling. Role engineering is project-based: collaborating with business owners to model functional and application roles, mining existing access data to bootstrap role definitions, and tuning role membership criteria over time as the model matures.
Read application API/SCIM docs; map identity attributes; agree governance scope with the application owner.
Configure or develop the connector; model entitlements as access profiles; build provisioning + de-provisioning paths.
Define certification scope; set role memberships; configure SoD policies and exception workflows.
Tune campaign cadence; monitor provisioning health; document for the operations runbook.
The platform footprint is broader than most non-specialists realise. Across a Fortune 500 IdentityIQ deployment the developer will touch:
Connectors — JDBC, LDAP, REST, SAP, ServiceNow, Workday, Active Directory, Azure AD, and dozens of bespoke endpoints. Connector quality is the single largest determinant of programme success — fragile connectors create operational drag for years.
Rules — Identity attribute rules, certification trigger rules, lifecycle event rules, policy violation rules, workflow customisation rules. Rules let the developer push the platform past its UI-configurable limits when business logic is ambiguous or governance policies are unusual.
Role and entitlement models — Functional roles, application roles, IT roles, business roles, and the membership criteria that map identities to those roles. Role engineering is part data modelling, part organisational politics, and part platform configuration; the developer is the glue between all three.
Workflow customisation — The IdentityIQ workflow engine drives provisioning, approval routing, and exception handling. Customising workflows is one of the most error-prone areas of the platform; mistakes compound at production scale.
REST API consumption — IdentityNow's REST API and IdentityIQ's IdentityIQ REST API allow the developer to integrate the platform with adjacent tools (ITSM, SIEM, ServiceNow, custom dashboards) and to script bulk operations that would be impractical through the UI.
The strongest SailPoint Developer credentials are platform-issued and earned through hands-on testing rather than multiple-choice exams. SailPoint IdentityIQ Engineer validates the developer can configure and administer the platform end-to-end; IdentityIQ Developer signals deeper rule and connector customisation capability. The IdentityNow Implementation Lead credential is the SaaS-equivalent and increasingly required for new programme work as IdentityNow share grows.
Beyond formal certification, our screening process emphasises practical signal. We give every SailPoint Developer candidate a 60-minute live exercise: writing a BeanShell rule against a sample identity object, debugging a deliberately broken IdentityIQ workflow, or building an IdentityNow transform that handles edge cases in attribute normalisation. Performance on the live exercise predicts on-the-job effectiveness more reliably than years-of-experience claims.
US base salary in 2026 sits in the $130,000–$180,000 range, with the upper end reserved for senior developers with regulated-industry production exposure (banking, healthcare, federal contracting). UK rates run £85,000–£125,000 with London weighting; India-based SailPoint Developers serving global delivery typically earn INR 22–45 lakh depending on customer-facing time and platform depth.
Demand has been chronically tight since 2018 and has not eased. SailPoint's installed base continues to expand — the platform's market position as the default IGA choice for regulated enterprises means new programme starts outpace the supply of trained developers entering the market each year.
Most engagements run as embedded contract for six to eighteen months, often with a defined conversion option. We also support short-burst engagements for connector spikes, certification campaign rescues, and platform health audits. Our SailPoint staffing service covers the broader engagement context, and our IAM Architect staffing is the natural pair when a programme also needs senior architecture leadership alongside development depth.