Senior Identity Engineer


Position Purpose

The Senior Identity Engineer will work with the identity services engineering team to architecture, design and standardize Identity Management infrastructures including Active Directory, ADFS, Enterprise Authentication, Single Sign-on and Provisioning systems. The candidate will implement solutions to successfully integrate new technology with legacy applications. The candidate must have proven experience with an IGA and PAM system and possess strong communication skills. The candidate will support and comply with guidelines, policies, and procedures for incident, problem, configuration and change management.

Primary Responsibilities

  • Platform management for Sleep Numbers Identity and Privileged Access Management systems.
  • Develop custom integrations where standard plugins do not exist for Sleep Numbers application and infrastructure systems.
  • Partner with the different platform teams on integrating with their products.
  • Support ongoing security compliances initiatives.
  • Thought leader across multiple teams and technologies to drive change into teams to move towards and infrastructure as code approach.

Key Performance Indicators

  • Using automation to reduce operational workload to support teams.
    • Fully Automated configuration management, with 100% unit and regression testing
    • Automated repeatable processes
    • Fully automated CI/CD pipeline that other teams can leverage
  • Providing a unified environment for developers

Position Requirements

  • 4 years college degree or equivalent work experience
  • 7+ years of proven experience with enterprise level Active Directory 2008/2012/2016.
  • 7+ years of proven experience and strong knowledge with Microsoft IAM Technologies including Active Directory Federation Services (ADFS.
  • 3+ years of experience with Sailpoint administration and engineering, including custom integrations
  • 3+ years of experience with Thycotic administration and engineering
  • 5+ years of strong knowledge and experience of the different authentication protocols: Kerberos, LDAP, RADIUS, SAML, OAuth, OpenID, etc...
  • 5+ years of experience implementing MFA, adaptive authentication and Single-sign on.
  • 3+ years of proven experience with cloud computing services (O365/Microsoft Azure).
  • 2+ years of experience working with APIs
  • Experience designing, implementing and supporting Identity Management/Directory Services/Privilege Access technologies.
  • Some basic programming skills, especially around how applications authenticate and authorize access independently of the programming language used.
  • Good diagnostic, analytical, troubleshooting, design and communication skills


  • Experience with migrating away from Oracle Identity Manager to Sailpoint.
  • Experience with Thycotic from a PAM solution.
  • Experience integrating Privilege Access Management into an organization.

Working Conditions

  • M-F Day shift. 
  • Rotational On-call
  • Off hours Production maintenance windows.


Job ID R12030
Sophia, Customer Service Representative

“Sleep is integral to a happy healthy lifestyle and it has such a huge impact on everyday life. Sleep Number is a unique company to work for because you’re truly helping people.”

Sophia, Customer Service Representative

Job Alerts

Be the first to know about events, exclusive updates and get the job info that matches what you’re looking for. Simply type to search for a job category or location – and then click “ADD.” You can even add multiple categories and locations. Press “SIGN UP” and your job alerts will be on their way.


  • Information Technology, Minneapolis, Minnesota, United StatesRemove