Sr. Staff Systems Engineer - Identity Governance & Access (SailPoint / Microsoft Entra ID)

Meet the Team

As the most senior technical engineer on the IT Core Services team, the Sr. Staff Systems Engineer - Identity Governance & Access is Dexcom's technical authority for Identity Governance and Administration (IGA). This role owns the engineering and long-term health of Dexcom's SailPoint Identity Security Cloud (ISC) platform and serves as a subject matter expert for Microsoft Entra ID and Active Directory in a global, regulated environment with more than 14,000 human identities.

We are looking for a hands-on, security-first engineer who has built and operated SailPoint in production and is recognized by peers as the go-to expert. This person will lead Dexcom's technical work on the SailPoint ISC implementation alongside our implementation partner, own the platform after go-live and raise the technical bar of the team.

Where You Come In

• You will serve as the technical owner and lead engineer for SailPoint Identity Security Cloud (ISC), overseeing tenant configuration, virtual appliances and IQService, identity profiles, transforms, rules, provisioning policies, and deployment activities across environments.
• You will lead Dexcom's SailPoint ISC implementation, partnering closely with implementation vendors to validate architecture, approve technical designs, drive testing efforts, and ensure successful knowledge transfer for long-term platform ownership.
• You will design and support identity lifecycle automation by managing SailPoint-to-Workday integrations, Joiner/Mover/Leaver processes, and application onboarding across Active Directory, Microsoft Entra ID, Okta, SaaS platforms, databases, and REST/SCIM-connected systems.
• You will configure and enhance identity governance capabilities, including access requests, ServiceNow integrations, role-based access controls, access certifications, separation-of-duties policies, and governance processes for workforce, external, and non-human identities.
• You will serve as a subject matter expert for Microsoft Entra ID, providing technical leadership in hybrid identity, single sign-on, provisioning, Conditional Access, phishing-resistant MFA, Privileged Identity Management, and Identity Protection.
• You will provide expert guidance on enterprise Active Directory services, including directory architecture, Group Policy, Certificate Services, Kerberos security, privileged access strategies, and service account management.
• You will champion a security-first, Zero Trust approach to identity management by enforcing least-privilege access, supporting identity threat detection and response, and partnering with Information Security to meet audit and compliance requirements.
• You will leverage APIs, scripting, automation, configuration-as-code practices, and AI-powered tools to streamline identity operations, improve efficiency, and advance governance capabilities for both human and non-human identities.
• You will operate the IGA platform as a highly available service by establishing monitoring, reporting, service levels, operational processes, and serving as the highest technical escalation point for identity-related incidents.
• You will provide technical leadership across IT Core Services by mentoring engineers, leading design reviews, presenting solutions to architecture and change advisory boards, and establishing identity engineering standards, documentation, and best practices.

What Makes You Successful

• You have a bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent professional experience.
• You bring extensive experience in systems engineering with deep expertise in Identity & Access Management (IAM) and Identity Governance & Administration (IGA).
• You have hands-on experience leading enterprise SailPoint implementations and possess expert knowledge of SailPoint Identity Security Cloud, including identity lifecycle management, workflows, certifications, provisioning, integrations, and automation.
• You have successfully integrated SailPoint with Workday and other enterprise platforms to automate Joiner, Mover, and Leaver processes at scale.
• You have advanced expertise in Microsoft Entra ID, Active Directory, hybrid identity, single sign-on, provisioning, Conditional Access, and Privileged Identity Management.
• You apply a strong security mindset and have experience implementing Zero Trust principles, least-privilege access models, privileged access controls, and identity security best practices.
• You possess deep knowledge of identity standards and protocols, including SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, and role-based access controls.
• You have strong scripting and integration skills using technologies such as PowerShell, Python, JavaScript, Microsoft Graph, REST APIs, and SQL.
• You have experience supporting identity governance programs in regulated environments and partnering with compliance, audit, and security teams to meet SOX, HIPAA, GDPR, ISO 27001, and similar requirements.
• You effectively manage implementation partners, influence stakeholders, mentor engineers, and communicate complex technical concepts to both technical and business audiences.
• You bring additional value through experience with Okta, CyberArk, Microsoft Defender for Identity, Microsoft Sentinel, cloud identity platforms, and non-human identity governance, including service accounts and AI agents.
• You have experience leveraging AI-powered tools and automation technologies, such as Microsoft 365 Copilot, GitHub Copilot, OpenAI ChatGPT, and related solutions, to enhance productivity and engineering outcomes.
• You hold or are able to obtain industry-recognized certifications such as SailPoint ISC, Microsoft SC-300, SC-100, CISSP, CISM, or CCSP.
• You thrive in regulated, fast-paced environments and have experience working within Agile and Scrum delivery models.

What you'll get

• A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community.
• A full and comprehensive benefits program.
• Growth opportunities on a global scale.
• Access to career development through in-house learning programs and/or qualified tuition reimbursement.
• An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.

Travel Required

• 15-25%

Experience and Education Requirements

• Typically requires a Bachelor's degree in a technical discipline, and a minimum of 13+ years related experience or a Master's degree and 8+ years equivalent industry experience or a PhD and 5+ years of experience.

Remote Workplace

• Your location will be a home office; you are not required to live within commuting distance of your assigned Dexcom site (typically 75 miles/120km). If you reside within commuting distance of a Dexcom site (typically 75 miles/120km) a hybrid working environment may be available. Ask about our Flex workplace option.

Meritain, an Aetna Company, creates and publishes the Machine-Readable Files on behalf of Dexcom.

• To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Dexcom.
• Only authorized staffing and recruiting agencies may use this site or to submit profiles, applications or resumes on specific requisitions.
• Dexcom does not accept unsolicited resumes or applications from agencies.
• Please do not forward resumes to the Talent Acquisition team, Dexcom employees or any other company location.
• Dexcom is not responsible for any fees related to unsolicited resumes/applications.

AI in Hiring Notice: We may use AI supported tools to help make our hiring process more efficient, consistent, and accessible for candidates around the world. All hiring decisions are made by people.

Salary

$141,800.00 - $236,400.00

#DexcomUS