Lead Cybersecurity-IAM Operations AI‑Enabled–SailPoint IdentityIQ-ISC
AT&T Services, Inc. · USA:NC:Charlotte / Ibm Dr - Adm:8505 Ibm Dr
$141,300–$211,900from the description
Jul 1, 2026
USA:NC:Charlotte / Ibm Dr - Adm:8505 Ibm Dr
Jul 20, 2026
What this job asks for AI summary
A Tier 3 identity and access management role centered on operating SailPoint IdentityIQ and Identity Security Cloud in production, while building and deploying AI- and LLM-powered tooling — such as RAG assistants over runbooks and automated triage for provisioning failures — to reduce manual effort across access operations. The position suits an experienced SailPoint practitioner who has also applied large language models or machine-learning techniques to real operational problems in audit-sensitive environments.
Senior level · Remote · Full-time
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 1,600 people nationally plausibly meet what this posting asks for (information security analysts). range 670–2,400
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,021 (middle half $99,961–$167,095). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The job posting explicitly states this is a full-time, on-site role in Charlotte, NC ('minimum of 5 days per week', '#LI-Onsite'). The caller has overridden this to remote=true with a national candidate pool; the metro has been left blank accordingly.
The posting title is 'Lead Cybersecurity' (AT&T's internal job family name), but the role's day-to-day work is IAM operations and AI/LLM tooling for identity governance — classified as Information Security Analysts (15-1212). A runner-up of 15-1299 (Computer Occupations, All Other) reflects the novel AI-augmented IAM operations focus that doesn't map cleanly to a single standard occupation.
SailPoint IdentityIQ/ISC operations and the ability to apply LLMs/AI to operational workflows are both stated under 'What You'll Need' with firm language and are treated as hard gates. RAG assistant-building is explicitly called out as a core responsibility in the role description.
Azure (Key Vault, Log Analytics, containers, APIs) and SQL are listed under 'Platform & Operations' with firm language ('experience') in what reads as a requirements block.
SailPoint AI-Driven Identity Security, Access Recommendations, and Harbor Pilot are listed under a 'SailPoint Vendor AI Experience' section that begins with 'Preferred experience includes familiarity with' in the narrative, and the section header itself is framed as preferred/supplemental — treated as preferred accordingly.
No minimum total years of experience is stated at the role level; the compensation band ($141,300–$211,900/year) and 'Lead' internal title are consistent with a Senior individual-contributor band.
Ignored 2 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): SailPoint Identity Security Cloud, SailPoint AI-Driven Identity Security.
Caller marked this a fully-remote role — scored against the national candidate pool.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.