SailPoint Certified IdentityIQ Engineer

IIQ-ENGINEER · ● Active · Professional · SailPoint

Vendor certification for SailPoint IdentityIQ platform engineers. Validates expertise in architecting, implementing, and managing identity governance workflows, connectors, provisioning rules, and compliance reporting within the IdentityIQ platform.

Exam facts

Vendor source — SailPoint Training & Certifications ↗
Exam guide — SailPoint Certification Exam Blueprint ↗
Register for exam — SailPoint University Proctoring ↗

About

The SailPoint Certified IdentityIQ Engineer credential validates professional-level competency in designing, developing, and troubleshooting identity governance solutions using the SailPoint IdentityIQ platform. First introduced in 2015, it has evolved through multiple versions to reflect current platform capabilities. This certification is ideal for IAM engineers, systems architects, and platform administrators who implement identity lifecycle management, provisioning workflows, and compliance controls in enterprise environments.

Domain context — Identity & Access Management (IAM)

Vendor-specific identity governance and administration platform; governs user identity data, role hierarchies, entitlements, and lifecycle provisioning rules across connected systems.

Read full deep dive — SailPoint Ecosystem →

Topics covered

• IdentityIQ Architecture & Components — Platform structure, beans, configuration, object models, UI frameworks
• Connectors & Data Sources — Connector types, correlation logic, attribute mapping, connection testing, troubleshooting
• Identity Attributes & Correlation — Identity attribute definition, attribute synchronization, identity matching rules, account correlation
• Roles & Entitlements — Role models, role mining, entitlement definitions, role hierarchies, role optimization
• Provisioning & Lifecycle Management (LCM) — Request handling, provisioning rules, approval workflows, identity events, provisioning cleanup
• Workflows — Workflow designer, process variables, step types, conditional logic, task routing, error handling
• Reports & Dashboards — Report builder, scheduled reports, KPIs, custom reporting, compliance dashboards
• Compliance & Auditing — SOD (Separation of Duties) rules, certification, audit trails, access reviews, attestation workflows
• Security & Performance — Platform hardening, SSL certificates, performance tuning, log management, disaster recovery

Source: SailPoint Certification Exam Blueprint ↗

Common skills at Identity & Access Management (IAM) · Professional

Shared competencies for IAM domain professionals — not specific to IdentityIQ.

• Identity data modeling and lifecycle governance frameworks
• Provisioning workflow design and exception handling
• Access control policy definition and attestation
• Multi-system identity correlation and synchronization
• Role-based and attribute-based access control (RBAC/ABAC)
• Compliance rule configuration (SOD, regulatory requirements, organizational controls)
• System integration and API-driven identity automation
• Audit trail review and forensic identity analysis
• Performance tuning and capacity planning for large-scale identity systems
• Cross-functional stakeholder communication (security, HR, application owners)

Recommended courses at Identity & Access Management (IAM) · Professional

Course-selection rule: SailPoint University (sponsored pathway) is the authoritative source; Cybrary and Udemy courses supplement hands-on labs. Partner-sponsored training is common in enterprise IAM roles.

Practice exams

Note: SailPoint practice exams are limited compared to major vendor certifications. Hands-on lab work in a sandbox IdentityIQ environment is the primary preparation strategy.

Books

Book rule: Official SailPoint documentation (Compass Docs) serves as the definitive reference; third-party IAM books provide broad context but not IdentityIQ-specific training. No dedicated study guide exists for this cert; hands-on labs are essential.

Typical job titles at Identity & Access Management (IAM) · Professional

IGA Engineer · IdentityIQ Platform Engineer · Identity Architect (Junior/Mid) · IAM Systems Administrator · Identity Governance Specialist · Access Control Engineer

(Job titles drawn from current enterprise IAM job postings that list SailPoint IdentityIQ expertise as required or preferred.)

Salary

Salary note: SailPoint IdentityIQ specialists command premium IAM salaries due to the platform's enterprise specialization and vendor-specific expertise requirement. Ranges reflect mid-career professionals in major tech hubs; enterprise banking, healthcare, and government sectors typically pay at the higher end.

Skills validated

• IdentityIQ platform architecture and object model — Beans, configuration, UI framework, deployment models
• Connector development and data source integration — Connector framework, correlation rules, account lifecycle
• Identity attribute governance — Attribute definitions, synchronization, matching algorithms
• Role and entitlement hierarchy modeling — Role mining, role optimization, entitlement stratification
• LCM workflow orchestration — Request routing, provisioning logic, approval chains, exception handling
• Advanced workflow design — Process variables, step libraries, conditional routing, error management
• Report customization and compliance dashboards — Report builder syntax, KPI tracking, audit reporting
• Separation of Duties (SOD) rule configuration — Policy definition, violation detection, remediation workflows
• Access certification campaigns — Attestation configuration, reviewer assignment, certification workflows
• System performance tuning — Query optimization, memory management, connection pooling, scaling strategies
• Integration patterns — REST/SOAP APIs, middleware connectors, identity federation, third-party system synchronization

Related certifications

• Stacks with: SailPoint Certified User Provisioning Administrator ↗ (parallel professional-level cert)
• Prerequisite for: SailPoint Certified IdentityIQ Architect ↗ (expert-level, requires 3+ years hands-on)
• Replaces: N/A (certification has evolved; no previous version)
• Equivalents at this level: Okta Certified Professional ↗ · Ping Identity Access Management Specialist ↗
• Vendor overview: SailPoint Vendor Overview ↗

Career progression with this cert

Entry pathway:
SailPoint University → Hands-on IdentityIQ sandbox → Internal certification (pre-assessment) → Certified IdentityIQ Engineer

After this cert:
Mid-level IGA Engineer (2–3 years) → SailPoint Certified IdentityIQ Architect (expert) → Senior Principal Identity Architect

Typical project progression:

1. Connector configuration & correlation logic (weeks 1–4)
2. Provisioning workflow troubleshooting (weeks 5–8)
3. Custom role modeling & SOD rule creation (weeks 9–12)
4. LCM policy documentation & certification campaigns (weeks 13–16)
5. Performance tuning & enterprise scalability (months 5–12)

Preparation tips

Hands-on labs are non-negotiable. SailPoint certifications prioritize practical platform experience over exam memorization. The IdentityIQ sandbox (available via partner programs or trial environments) is essential.

• Workflow design: Build 5–10 custom workflows covering request routing, approvals, and error handling.
• Connector correlation: Test identity matching algorithms with real-world data sets.
• Report building: Create 3–5 custom reports covering compliance, SoD violations, and access reviews.
• SOD rules: Design and test SOD rule chains for common compliance frameworks (SOX, GDPR, HIPAA).
• Exam windows: Allow 4–6 months from start to certification if new to IdentityIQ; 2–3 months if already working on the platform.

Sources

• SailPoint Training & Certifications
• SailPoint Certification Exam Blueprint
• SailPoint University
• SailPoint Compass Documentation
• Glassdoor — IdentityIQ Engineer Salary
• Robert Half IT Salary Guide
• IT Jobs Watch (UK)

Last verified: 2026-05-01
Parent ecosystem: SailPoint Ecosystem
Parent domain: Identity & Access Management (IAM)
Vendor overview: SailPoint Vendor Overview