Sr. Staff Systems Engineer – Identity Governance & Access (SailPoint / Microsoft Entra ID)

The Company

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health.

 

We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the Team:

As the most senior technical engineer on the IT Core Services team, the Sr. Staff Systems Engineer – Identity Governance & Access is Dexcom’s technical authority for Identity Governance and Administration (IGA). This role owns the engineering and long-term health of Dexcom’s SailPoint Identity Security Cloud (ISC) platform and serves as a subject matter expert for Microsoft Entra ID and Active Directory in a global, regulated environment with more than 14,000 human identities.

 

We are looking for a hands-on, security-first engineer who has built and operated SailPoint in production and is recognized by peers as the go-to expert. This person will lead Dexcom’s technical work on the SailPoint ISC implementation alongside our implementation partner, own the platform after go-live and raise the technical bar of the team.

Where You Come In:

• You will serve as the technical owner and lead engineer for SailPoint Identity Security Cloud (ISC), overseeing tenant configuration, virtual appliances and IQService, identity profiles, transforms, rules, provisioning policies, and deployment activities across environments.
• You will lead Dexcom’s SailPoint ISC implementation, partnering closely with implementation vendors to validate architecture, approve technical designs, drive testing efforts, and ensure successful knowledge transfer for long-term platform ownership.
• You will design and support identity lifecycle automation by managing SailPoint-to-Workday integrations, Joiner/Mover/Leaver processes, and application onboarding across Active Directory, Microsoft Entra ID, Okta, SaaS platforms, databases, and REST/SCIM-connected systems.
• You will configure and enhance identity governance capabilities, including access requests, ServiceNow integrations, role-based access controls, access certifications, separation-of-duties policies, and governance processes for workforce, external, and non-human identities.
• You will serve as a subject matter expert for Microsoft Entra ID, providing technical leadership in hybrid identity, single sign-on, provisioning, Conditional Access, phishing-resistant MFA, Privileged Identity Management, and Identity Protection.
• You will provide expert guidance on enterprise Active Directory services, including directory architecture, Group Policy, Certificate Services, Kerberos security, privileged access strategies, and service account management.
• You will champion a security-first, Zero Trust approach to identity management by enforcing least-privilege access, supporting identity threat detection and response, and partnering with Information Security to meet audit and compliance requirements.
• You will leverage APIs, scripting, automation, configuration-as-code practices, and AI-powered tools to streamline identity operations, improve efficiency, and advance governance capabilities for both human and non-human identities.
• You will operate the IGA platform as a highly available service by establishing monitoring, reporting, service levels, operational processes, and serving as the highest technical escalation point for identity-related incidents.
• You will provide technical leadership across IT Core Services by mentoring engineers, leading design reviews, presenting solutions to architecture and change advisory boards, and establishing identity engineering standards, documentation, and best practices.

What Makes You Successful:

• You have a bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent professional experience.
• You bring extensive experience in systems engineering with deep expertise in Identity & Access Management (IAM) and Identity Governance & Administration (IGA).
• You have hands-on experience leading enterprise SailPoint implementations and possess expert knowledge of SailPoint Identity Security Cloud, including identity lifecycle management, workflows, certifications, provisioning, integrations, and automation.
• You have successfully integrated SailPoint with Workday and other enterprise platforms to automate Joiner, Mover, and Leaver processes at scale.
• You have advanced expertise in Microsoft Entra ID, Active Directory, hybrid identity, single sign-on, provisioning, Conditional Access, and Privileged Identity Management.
• You apply a strong security mindset and have experience implementing Zero Trust principles, least-privilege access models, privileged access controls, and identity security best practices.
• You possess deep knowledge of identity standards and protocols, including SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, and role-based access controls.
• You have strong scripting and integration skills using technologies such as PowerShell, Python, JavaScript, Microsoft Graph, REST APIs, and SQL.
• You have experience supporting identity governance programs in regulated environments and partnering with compliance, audit, and security teams to meet SOX, HIPAA, GDPR, ISO 27001, and similar requirements.
• You effectively manage implementation partners, influence stakeholders, mentor engineers, and communicate complex technical concepts to both technical and business audiences.
• You bring additional value through experience with Okta, CyberArk, Microsoft Defender for Identity, Microsoft Sentinel, cloud identity platforms, and non-human identity governance, including service accounts and AI agents.
• You have experience leveraging AI-powered tools and automation technologies, such as Microsoft 365 Copilot, GitHub Copilot, OpenAI ChatGPT, and related solutions, to enhance productivity and engineering outcomes.
• You hold or are able to obtain industry-recognized certifications such as SailPoint ISC, Microsoft SC-300, SC-100, CISSP, CISM, or CCSP.
• You thrive in regulated, fast-paced environments and have experience working within Agile and Scrum delivery models.

What you’ll get:

• A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community.
• A full and comprehensive benefits program.
• Growth opportunities on a global scale.
• Access to career development through in-house learning programs and/or qualified tuition reimbursement.
• An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.

Travel Required:

• 15–25%

Experience and Education Requirements:

• Typically requires a Bachelor’s degree in a technical discipline, and a minimum of 13+ years related experience or a Master’s degree and 8+ years equivalent industry experience or a PhD and 5+ years of experience.

Remote Workplace:

• Your location will be a home office; you are not required to live within commuting distance of your assigned Dexcom site (typically 75 miles/120km). If you reside within commuting distance of a Dexcom site (typically 75 miles/120km) a hybrid working environment may be available. Ask about our Flex workplace option.

Please note: The information contained herein is not intended to be an all-inclusive list of the duties and responsibilities of the job, nor are they intended to be an all-inclusive list of the skills and abilities required to do the job. Management may, at its discretion, assign or reassign duties and responsibilities to this job at any time. The duties and responsibilities in this job description may be subject to change at any time due to reasonable accommodation or other reasons. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. 

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Dexcom’s AAP may be viewed upon request by contacting Talent Acquisition at [email protected]. 

If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact Dexcom Talent Acquisition at [email protected]. 

Meritain, an Aetna Company, creates and publishes the Machine-Readable Files on behalf of Dexcom. To link to the Machine-Readable Files, please click on the URL provided:  https://health1.meritain.com/app/public/#/one/insurerCode=MERITAIN_I&brandCode=MERITAINOVER/machine-readable-transparency-in-coverage?reportingEntityType=TPA_19874&lock=true

To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Dexcom. Only authorized staffing and recruiting agencies may use this site or to submit profiles, applications or resumes on specific requisitions. Dexcom does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to the Talent Acquisition team, Dexcom employees or any other company location. Dexcom is not responsible for any fees related to unsolicited resumes/applications.
 

AI in Hiring Notice: We may use AI supported tools to help make our hiring process more efficient, consistent, and accessible for candidates around the world.  All hiring decisions are made by people.

Salary:

$141,800.00 - $236,400.00

#DexcomUS