Senior SailPoint Administrator

About Blue Cross and Blue Shield of Minnesota

At Blue Cross and Blue Shield of Minnesota, we are committed to paving the way for everyone to achieve their healthiest life. We are looking for dedicated and motivated individuals who share our vision of transforming healthcare. As a Blue Cross associate, you are joining a culture that is built on values of succeeding together, finding a better way, and doing the right thing. If you are ready to make a difference, join us.

The Impact You'll Have

Blue Cross and Blue Shield of Minnesota is hiring a Senior SailPoint Administrator. In this role, you will be responsible for the administration, support, optimization, and governance of the organization's Identity and Access Management (IAM) platform, with a primary focus on SailPoint Identity Security Cloud (ISC) or IdentityIQ (IIQ). This role serves as a technical leader for identity governance, access certifications, lifecycle management, role management, and compliance initiatives. The Senior SailPoint Administrator partners closely with Cybersecurity, Infrastructure, Application Owners, HR, Audit, and Business stakeholders to ensure secure, compliant, and efficient identity and access management processes.

What You'll Do

• Administer, configure, maintain, and support the SailPoint platform.
• Administer and configure Identity Profiles, Access Profiles, Roles, Policies, Lifecycle Event triggers, and provisioning/correlation Rules.
• Configure and support provisioning workflows, approval chains, and automated Joiner–Mover–Leaver lifecycle events.
• Maintain identity attribute mappings, correlation logic, and authoritative source data quality.
• Monitor SailPoint system health and performance, maintain lifecycle/KPI dashboards, and document configurations and operational procedures.
• Troubleshoot and resolve SailPoint application, connector, and provisioning issues.
• Coordinate SailPoint upgrades, patches, and platform enhancements.
• Support and improve identity governance and administration (IGA) capabilities.
• Manage access certifications, attestations, segregation of duties (SoD), and policy enforcement.
• Develop and maintain role-based access control (RBAC) models and access profiles.
• Conduct periodic access reviews and remediation activities.
• Ensure compliance with regulatory and internal security requirements.
• Design, configure, and support integrations between SailPoint and enterprise systems.
• Support onboarding of new applications into SailPoint, including entitlement harvesting, connector configuration, and testing of SAML/OAuth2/OIDC/SCIM integrations.
• Collaborate with development teams to automate identity processes and workflows.
• Identify opportunities to improve operational efficiency through automation.
• Partner with Information Security and Audit teams to support compliance initiatives.
• Assist with internal and external audit requests related to identity governance.
• Monitor privileged access and access control compliance.
• Investigate and resolve identity-related security findings and risks.
• Support implementation of least-privilege and zero-trust principles.
• Serve as a technical subject matter expert for SailPoint and identity governance.
• Mentor junior administrators and analysts.
• Provide guidance on IAM best practices and governance standards.
• Participate in IAM strategy, roadmap development, and modernization initiatives.
• Lead or contribute to IAM-related projects and platform enhancements.

How You'll Do It

• Conducts detailed analysis and study of customer requirements for new or existing projects to determine feasibility, cost and time required, and compatibility with current systems and hardware capabilities.
• Develops and documents the framework for integration and implementation for changes to technical standards.
• Develops moderate to highly complex infrastructure interactions to ensure the security, stability, recoverability, and access to systems and information.
• Advises on enterprise-wide infrastructure systems growth requirements, capabilities, and constraints to ensure the long-term functionality and operation standards.
• Participates in the RFP process to evaluate and select vendor solutions.
• Oversees and evaluates the work of contractors and vendors to ensure quality services.
• Participates in or leads cross-functional initiatives on the development and implementation of enterprise-wide major installations, upgrades and process changes.
• May have accountability for project execution and resource allocation.
• Facilitates knowledge sharing by creating and maintaining detailed, comprehensive documentation and diagrams.
• Provides technical guidance or mentorship to others as appropriate.
• Tracks industry trends and maintains knowledge of new technologies to better serve the enterprise architecture needs.
• Performs systems support activities and may include required participation in an on-call rotation for support of systems outside of normal business hours.
• Participates in structured cross-functional processes including architecture, change, risk, resiliency, incident, problem, CMDB, and asset management.
• Assists manager in facilitating goal accomplishment by providing work direction to assigned employees and by monitoring the status of work on a daily basis.
• Clarifies roles and responsibilities of assigned employees based on direction from the manager.
• Provides coaching or mentoring as requested or deemed appropriate based on direction of the manager.
• Assists manager in facilitating resource allocation to ensure appropriate staffing levels.
• Shares feedback with the manager as requested or deemed appropriate, and may make recommendations for performance reviews.
• May make recommendations to the manager for team and individual recognition.
• Performs additional responsibilities consistent with the scope and level of the role, as assigned.

Required Skills & Experience

• 5+ years of related information technology professional experience.
• Bachelor’s degree; in lieu of a degree, an additional two years of relevant experience beyond the qualifications listed above may be accepted.

Preferred Skills & Experience

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or equivalent experience.
• 5+ years of Identity and Access Management experience.
• 3+ years of hands-on SailPoint administration experience (Identity Security Cloud and/or IdentityIQ).
• SailPoint IdentityIQ Engineer Certification or SailPoint Identity Security Cloud Certification.
• Experience with CyberArk, Okta, Microsoft Entra ID, or other IAM platforms.
• Demonstrated expertise with PowerShell, Java, BeanShell, SQL, REST APIs, or other automation technologies.
• Familiarity with identity lifecycle management, access governance, and certification processes.
• Experience supporting audit, compliance, and regulatory requirements.
• Knowledge of NIST, SOX, HIPAA, PCI, or other regulatory frameworks.
• Experience working in a healthcare, insurance, financial services, or highly regulated environment.
• Ability to communicate complex topics clearly and concisely, actively listen to anticipate stakeholder needs, and align others to drive informed decisions.
• Capability to analyze complex information, evaluate options, and work cross-functionally to drive resolution and prevent recurrence.
• Capacity to effectively organize work, balance competing priorities, and manage time across complex assignments and competing deadlines.
• Broad knowledge of systems, infrastructure, and engineering concepts, with understanding of business and industry context.
• Proficiency with cloud platforms and modern infrastructure, applying scalable and secure solutions.
• Experience using modern engineering practices (programming, APIs, data, CI/CD) within agile/DevOps environments.
• Knowledge of engineering standards and delivery practices supporting quality, security, and compliance.

Licensure/Certifications

Role Designation

Hybrid

Role designation definition:

• Teleworking is working full time remote.
• Hybrid is a minimum of 2 days onsite.
• Onsite is full-time onsite.

Anchored in Connection Our hybrid approach is designed to balance flexibility with meaningful in-person connection and collaboration. We come together in the office two days each week – most teams designate at least one anchor day to ensure team interaction. These in-person moments foster relationships, creativity, and alignment. The rest of the week you are empowered to work remote.

Compensation and Benefits

$102,400.00 - $138,300.00 - $174,200.00 Annual Pay is based on several factors which vary based on position, including skills, ability, and knowledge the selected individual is bringing to the specific job.

We offer a comprehensive benefits package which may include:

• Medical, dental, and vision insurance
• Life insurance
• 401k
• Paid Time Off (PTO)
• Volunteer Paid Time Off (VPTO)
• And more

To discover more about what we have to offer, please review our benefits page.

Equal Employment Opportunity Statement

At Blue Cross and Blue Shield of Minnesota, we are committed to paving the way for everyone to achieve their healthiest life. Blue Cross of Minnesota is an Equal Opportunity Employer and maintains an Affirmative Action plan, as required by Minnesota law applicable to state contractors. All qualified applications will receive consideration for employment without regard to, and will not be discriminated against based on any legally protected characteristic.

Individuals with a disability who need a reasonable accommodation in order to apply, please contact us at: talent.acquisition@bluecrossmn.com.

Blue Cross® and Blue Shield® of Minnesota and Blue Plus® are nonprofit independent licensees of the Blue Cross and Blue Shield Association.

Physical requirements.