Jr. Sailpoint Engineer

Job Description

Fabletics is currently looking for a Jr. SailPoint Engineer. This role offers an exciting opportunity to support the Identity Governance team with day-to-day SailPoint Identity Security Cloud / IdentityNow administration, application onboarding, lifecycle automation, and operational support for MyAccess. The Jr. SailPoint Engineer will work closely with IT Operations, Service Desk, HRIS/Workday, Security, and business stakeholders to keep identity processes reliable, auditable, and scalable.

This role reports directly to the Identity Governance Manager.

How Do You Fit In?

The Jr. SailPoint Engineer plays a hands-on role in maintaining and improving Fabletics’ Identity & Access Management program. You will assist with configuring and troubleshooting SailPoint, supporting onboarding and offboarding automation, and helping keep application access clean, auditable, and properly governed. This is an excellent growth role for someone with a strong technical foundation who is eager to build deep expertise in Identity Governance and IAM.

What You Can Bring:

• 2 - 3 years of hands-on experience with a SailPoint IGA platform (Identity Security Cloud/IdentityNow or IdentityIQ), including access certifications, provisioning policies, and identity lifecycle workflows. Direct SailPoint product experience is required.

• Basic understanding of Identity & Access Management concepts including users, groups, roles, entitlements, access requests, approvals, provisioning, deprovisioning, and certifications.

• Familiarity with Active Directory and Azure / Microsoft Entra ID.

• Ability to troubleshoot user access issues, group membership issues, account status issues, and provisioning failures.

• Strong attention to detail and ability to follow structured processes.

• Comfortable working with tickets, documentation, checklists, test cases, and status updates.

• Good communication skills with both technical and non-technical stakeholders.

• Willingness to learn SailPoint Identity Security Cloud / IdentityNow, Workday-driven identity processes, SCIM, REST APIs, and workflow automation.

• Ideal candidate brings foundational AI literacy, including experience using generative AI tools, and a proactive mindset to experiment with new technologies to drive productivity and innovation. 

Preferred / Nice-to-Have Skills:

• Exposure to SailPoint IdentityNow / Identity Security Cloud, workflows, access profiles, roles, sources, or certifications.

• Experience with Workday as an authoritative identity source and/or Microsoft Teams workflow-based approvals.

• Familiarity with ITSM tools such as Freshservice, Jira, or Microsoft Planner.

• Basic understanding of SCIM, REST APIs, JSON, or workflow automation concepts.

• Experience supporting SOX, audit evidence, access reviews, or compliance-related tasks.

What You Will Be Doing:

SailPoint / MyAccess Administration

• Support daily administration of the SailPoint Identity Security Cloud / IdentityNow platform (MyAccess), including configuration and maintenance of applications, sources, access profiles, roles, governance groups, owners, and approvers.

• Troubleshoot access request issues, approval routing failures, provisioning errors, aggregation problems, and correlation gaps.

• Monitor SailPoint workflows, source aggregation jobs, and exception queues; support sandbox testing, production validation, and release documentation.

Onboarding, Offboarding & Lifecycle Automation

• Assist with onboarding and offboarding processes for FTEs, retail users, contractors, and rehires, including identity lifecycle state logic and Workday-driven identity changes.

• Ensure accurate downstream provisioning and deprovisioning to Active Directory, Azure / Entra ID, and other connected applications; monitor termination automation and post-termination access cleanup.

• Support retail automation flows including birthright access, group assignments, and promotion/demotion scenarios.

Approvals, Application & Source Onboarding

• Configure and maintain approval processes and routing logic for applications, access profiles, roles, and access requests; resolve stuck approvals, missing approvers, and escalation workflows.

• Assist with onboarding new applications into MyAccess, including owners, approvers, access profiles, entitlement mapping, and provisioning rules across various integration methods.

• Help with source configuration, aggregation testing, account correlation, and entitlement cleanup.

Monitoring, Audits & Certifications

• Monitor uncorrelated, orphaned, and duplicate accounts, stale access, and source mismatches; document findings and remediation steps.

• Assist with SOX-related access reviews, evidence collection, certification campaigns, and cleanup of invalid access profiles, missing owners, and inactive approvers.

Support, Documentation & Collaboration

• Create and maintain documentation, runbooks, and troubleshooting guides for MyAccess processes; assist with ticket tracking and operational reporting.

• Collaborate with business users, application owners, HRIS, Security, IT Operations, Service Desk, and Retail IT to translate access requirements into SailPoint configuration.

Where we are:

• This role will be remote, with headquarters located in El Segundo, CA  

Compensation & Total Rewards:  

At Fabletics, we believe work and life should fit together! We continue to build a culture of flexibility, to empower you to do your best and put yourself first. Our Total Rewards program rewards employees for their hard work, supporting their health, well-being, families, and ultimately their life journey. Total Rewards at Fabletics includes:   

-Hybrid Work Schedule*

-Discretionary Paid Time Off*    

-Summer Fridays*    

-Healthcare Plans    

-Employee Discounts    

-401k    

-Annual Bonus Program    

-Equity Program*    

-And More    

*Varied for retail, fulfillment and fully remote roles. 

The annual base salary range for this position is from $80,000-$100,000. The range provided includes the base salary that Fabletics expects to pay for the role. Offered base salary will be dependent on factors including the scope and complexity of the role, candidate’s related work experience, subject matter expertise and work location.   

#LI-JR1

#LI-Fabletics

#LI-Remote

Security Alert: Protect yourself from scams

At Fabletics, we're dedicated to recruiting top talent who share our drive for innovation. To safeguard candidates, Fabletics emphasizes legitimate recruitment practices. Initial communication is primarily via official email addresses and LinkedIn; beware of deviations. Personal data and sensitive information will not be solicited during the application phase. Interviews are conducted via phone, in person, or through the approved platforms Teams or Zoom—never via messaging apps or other calling services. Offers are merit-based, communicated verbally, and followed up in writing. If personal information is requested to initiate the hiring process, rest assured it will be through secure and protected means.

Fabletics, Inc. is an equal opportunity employer. We recruit, employ, compensate, develop, and promote regardless of race, national origin, religion, sex, sexual orientation, gender identity, age, disability, genetic information, veteran status, and other protected status as required by applicable. At Fabletics, Inc., we champion a vibrant workplace culture that thrives on diversity law and do not tolerate discrimination or harassment. We are one team from many backgrounds, innovating through diversity of individuals, who are driven by passion for creating an inclusive space for all. Fabletics, Inc. will continue to champion a workplace culture that prizes diversity and inclusivity. 

We encourage you to apply regardless of meeting all qualifications and/or requirements.