[Hiring] Jr. Sailpoint Engineer @Fabletics

Role Description

Fabletics is currently looking for a Jr. SailPoint Engineer. This role offers an exciting opportunity to support the Identity Governance team with day-to-day SailPoint Identity Security Cloud / IdentityNow administration, application onboarding, lifecycle automation, and operational support for MyAccess. The Jr. SailPoint Engineer will work closely with IT Operations, Service Desk, HRIS/Workday, Security, and business stakeholders to keep identity processes reliable, auditable, and scalable. This role reports directly to the Identity Governance Manager.

The Jr. SailPoint Engineer plays a hands-on role in maintaining and improving Fabletics’ Identity & Access Management program. You will assist with:

• Configuring and troubleshooting SailPoint
• Supporting onboarding and offboarding automation
• Helping keep application access clean, auditable, and properly governed

This is an excellent growth role for someone with a strong technical foundation who is eager to build deep expertise in Identity Governance and IAM.

Qualifications

• 2–3 years of experience in IT Security, IAM, Service Desk, enterprise application administration, or a related technical support role.
• Basic understanding of Identity & Access Management concepts including users, groups, roles, entitlements, access requests, approvals, provisioning, deprovisioning, and certifications.
• Familiarity with Active Directory and Azure / Microsoft Entra ID.
• Ability to troubleshoot user access issues, group membership issues, account status issues, and provisioning failures.
• Strong attention to detail and ability to follow structured processes.
• Comfortable working with tickets, documentation, checklists, test cases, and status updates.
• Good communication skills with both technical and non-technical stakeholders.
• Willingness to learn SailPoint Identity Security Cloud / IdentityNow, Workday-driven identity processes, SCIM, REST APIs, and workflow automation.
• Foundational AI literacy, including experience using generative AI tools, and a proactive mindset to experiment with new technologies to drive productivity and innovation.

Requirements

• Exposure to SailPoint IdentityNow / Identity Security Cloud, workflows, access profiles, roles, sources, or certifications.
• Experience with Workday as an authoritative identity source and/or Microsoft Teams workflow-based approvals.
• Familiarity with ITSM tools such as Freshservice, Jira, or Microsoft Planner.
• Basic understanding of SCIM, REST APIs, JSON, or workflow automation concepts.
• Experience supporting SOX, audit evidence, access reviews, or compliance-related tasks.

What You Will Be Doing

• SailPoint / MyAccess Administration:
  • Support daily administration of the SailPoint Identity Security Cloud / IdentityNow platform (MyAccess), including configuration and maintenance of applications, sources, access profiles, roles, governance groups, owners, and approvers.
  • Troubleshoot access request issues, approval routing failures, provisioning errors, aggregation problems, and correlation gaps.
  • Monitor SailPoint workflows, source aggregation jobs, and exception queues; support sandbox testing, production validation, and release documentation.
• Onboarding, Offboarding & Lifecycle Automation:
  • Assist with onboarding and offboarding processes for FTEs, retail users, contractors, and rehires, including identity lifecycle state logic and Workday-driven identity changes.
  • Ensure accurate downstream provisioning and deprovisioning to Active Directory, Azure / Entra ID, and other connected applications; monitor termination automation and post-termination access cleanup.
  • Support retail automation flows including birthright access, group assignments, and promotion/demotion scenarios.
• Approvals, Application & Source Onboarding:
  • Configure and maintain approval processes and routing logic for applications, access profiles, roles, and access requests; resolve stuck approvals, missing approvers, and escalation workflows.
  • Assist with onboarding new applications into MyAccess, including owners, approvers, access profiles, entitlement mapping, and provisioning rules across various integration methods.
  • Help with source configuration, aggregation testing, account correlation, and entitlement cleanup.
• Monitoring, Audits & Certifications:
  • Monitor uncorrelated, orphaned, and duplicate accounts, stale access, and source mismatches; document findings and remediation steps.
  • Assist with SOX-related access reviews, evidence collection, certification campaigns, and cleanup of invalid access profiles, missing owners, and inactive approvers.
• Support, Documentation & Collaboration:
  • Create and maintain documentation, runbooks, and troubleshooting guides for MyAccess processes; assist with ticket tracking and operational reporting.
  • Collaborate with business users, application owners, HRIS, Security, IT Operations, Service Desk, and Retail IT to translate access requirements into SailPoint configuration.

Benefits

• Hybrid Work Schedule*
• Discretionary Paid Time Off*
• Summer Fridays*
• Healthcare Plans
• Employee Discounts
• 401k
• Annual Bonus Program
• Equity Program*
• And More

The annual base salary range for this position is from $80,000-$100,000. The range provided includes the base salary that Fabletics expects to pay for the role. Offered base salary will be dependent on factors including the scope and complexity of the role, candidate’s related work experience, subject matter expertise, and work location.