Senior Specialist - Software Engineering

Role Description

Required Skills

Backend Development Seniorlevel proficiency in Python

Database Management Ability to design and write complex efficient SQL queries for data loading and manipulation

API Architecture Comprehensive understanding of designing building and securing RESTful APIs

Cloud Services Proven experience with serverless architecture specifically Azure Function Apps and message queuing with Azure Queues

Helpful but not required Prior experience with the SailPoint Web Services REST connector

Scope of Work

The contractor will be responsible for the following key workstreams A detailed design document will be provided

1Data Population and User Synchronization

oDevelop a robust script for the initial onetime load of all users groups and memberships from Enterprise Directory ED into the GM database This must include data transformation and case normalization to match the DB schema

oBuilding on the initial script create an efficient recurring process target every 5 minutes to poll for user updates in ED and sync them to the GM identities table

2Group Synchronization

oGoal Create an automated task that enforces the GM database as the authoritative source of truth for groups

oCore Logic The task will audit groups by comparing their state in the GM database against their state in Enterprise Directory ED and Active Directory AD If a discrepancy drift is detected the task must automatically remediate the change by reverting the noncompliant record in EDAD back into alignment with the GM database This process is designed to correct both manual outofband changes and inconsistent states resulting from partial provisioning failures

oOperational Modes The reconciliation logic must be implemented to support two distinct execution modes

1Scheduled Bulk Mode An efficient recurring process that identifies and reconciles all groups that have drifted from the source of truth since the tasks last run

2OnDemand Targeted Mode The logic must also be callable directly eg via an API or function call to perform an immediate reconciliation for a single specified group

oConstraint Implement a safeguard to prevent any reconciliation actions on a group that is currently in a provisioning state eg a status of INPROGRESS This is essential to avoid race conditions with legitimate inflight updates Refer to the Group Sync Process section in the design document for more details

3SailPoint Entitlement Aggregation API

oDesign and build a secure REST API endpoint for SailPoint

oThe endpoint must return a collection of all groups and their members including the following attributes name description owner certificationfrequency and approvertype Refer to the SailPoint GroupEntitlement Aggregation section in the design document for more details