The situation you're in is common in the IAM market and more solvable than it might appear. Five years of IBM IGI/ISIM/ISIG experience, CISSP, CCSP, and CIAM certifications give you the foundational governance knowledge that takes years to build. SailPoint is a different platform with its own terminology and architectural patterns, but the underlying concepts — JML lifecycle, access certification campaigns, entitlement management, connector architecture — are the same problems implemented differently. Your job is to make that translation visible to hiring managers.

The First Decision: IIQ or ISC?

Before investing significant time in hands-on preparation, the platform choice matters. SailPoint's market is bifurcating between IdentityIQ (IIQ, the on-premises platform) and Identity Security Cloud (ISC, the cloud-native SaaS version), and they're meaningfully different to learn and certify in.

IIQ has the larger installed base of existing enterprise customers who need maintenance, customization, and support. The IIQ job market is real but oriented toward maintaining existing implementations rather than new deployments. IIQ uses BeanShell (Java-based scripting) for custom logic and XML for configuration — it has a steeper technical learning curve and the hands-on learning path is harder because getting a working IIQ environment requires more infrastructure.

ISC is where new implementations are happening, where SailPoint's development investment is concentrated, and where AI-enhanced capabilities (role mining, AI-assisted reviews) are being delivered. ISC uses a more configuration-driven model with REST APIs, which means more of the implementation work is done through UI configuration and API calls rather than custom code. The ISC learning curve is faster for someone with IAM concepts already internalized.

The recommendation: if you're optimizing for where the market is going rather than where the existing installed base is, ISC is the better investment. If the job listings you're targeting specifically mention IIQ, learn IIQ. If they mention SailPoint without specifying, clarify during the application process — increasingly, "SailPoint experience" in a new implementation context means ISC.

How to Actually Get Hands-On Time

SailPoint's developer program and compass community. SailPoint offers a developer portal (developer.sailpoint.com) with free ISC developer tenant access. This is the most direct path to hands-on ISC experience — you get a working environment to build integrations, configure lifecycle workflows, and run access certification campaigns. The Compass community (community.sailpoint.com) is where SailPoint practitioners share configurations, ask questions, and document solutions to common problems.

For IIQ, getting a local development environment is more involved. SailPoint's evaluation licensing process is the formal path; some professionals use cloud VMs to host an evaluation instance. The community has documented environment setup guides that help navigate the licensing and infrastructure requirements.

Build something documented. A working configuration in a developer environment is only as valuable as what you document about it. Build a JML workflow in ISC — connect a simulated HR source, configure birthright access for a role, run an onboarding and offboarding cycle — and write it up as a case study in the same format you'd use in a GitHub README or a portfolio document. Document the business problem you were solving, the architecture decisions you made, and what you'd do differently at enterprise scale.

This approach was covered in depth in the context of MidPoint portfolios, and the same principles apply to ISC: hiring managers for identity governance roles value demonstrated implementation experience over theoretical knowledge. A documented ISC configuration demonstrates that you can execute, not just describe.

Labs and virtual training environments. SailPoint offers instructor-led training and self-paced labs through their training portal. These cost money but provide structured hands-on time with guided exercises. For someone with 5 years of IAM experience, the self-paced technical labs are more valuable than the conceptual courses — you already have the concepts, you need the platform-specific patterns.

Implementation partner internship or contract work. SailPoint's implementation partner ecosystem (Accenture, Deloitte, Optiv, and dozens of specialized SailPoint partners) regularly needs IAM professionals for project work. A contract engagement on an implementation project — even in a junior or support role — provides the best hands-on experience because it's against real client environments with real complexity. Your IBM background and certifications make you a more attractive candidate for this path than someone without IAM experience.

Translating Your IBM Experience to SailPoint Conversations

Your IBM IGI/ISIM/ISIG experience covers the same governance concepts SailPoint implements. In interviews, you need to translate explicitly rather than assuming the interviewer will make the connection.

Access certification campaigns in IBM → Access reviews/certifications in SailPoint. The underlying workflow is the same: define the scope of identities and entitlements to be reviewed, route certification items to appropriate reviewers, capture decisions with timestamps and justifications, and remediate revocations. You know how to design and run these; you just need to describe the SailPoint-specific terminology.

Provisioning policies in IBM → Access profiles and role-based provisioning in SailPoint. SailPoint's access profile model maps roles to specific entitlements in connected applications. IBM's provisioning policies follow the same logic. The mapping between job titles/roles and specific application entitlements is a concept you know; the implementation in SailPoint uses different configuration objects.

IBM connectors → SailPoint connectors/virtual appliances. IBM's adapters and connectors map to SailPoint's connector architecture. The concept — bridging the IGA platform to downstream applications for user provisioning — is identical. The specific configuration is platform-specific, which is what the hands-on preparation addresses.

IBM ISIG's governance workflows → SailPoint's certification campaigns and lifecycle workflows. The governance framework — who reviews what, with what decision options, at what cadence — maps directly.

When you talk about IBM experience in SailPoint contexts, frame it as: "I've implemented [governance concept] in IBM's framework. In SailPoint, the equivalent is [SailPoint-specific component], and I've been building familiarity with the SailPoint implementation through [developer tenant / training labs / specific project]."

The IIQ-to-ISC Migration Opportunity

This is specific to your situation: the enterprise market is in a multi-year wave of migrating from IIQ to ISC. Organizations with existing IIQ implementations are being encouraged to move to ISC, and these migrations require engineers who understand both platforms. You can position IBM IGA → ISC as similar to IIQ → ISC: someone who understands governance concepts deeply in one platform and is building specific ISC knowledge.

IIQ → ISC migration projects are a specific market opportunity that requires IGA depth (which you have from IBM) combined with ISC knowledge (which you're building). Engineers who can bridge legacy governance knowledge with ISC's cloud architecture are specifically valuable in these projects.

Your Certification Path

You have CISSP, CCSP, and CIAM — which cover the conceptual and governance framework territory comprehensively. The SailPoint-specific certification adds platform credential:

SailPoint ISC Engineer (or the equivalent current certification name) is the ISC-specific technical certification. This demonstrates platform knowledge specifically, which your general credentials don't cover. Given your existing cert portfolio, adding the SailPoint platform certification is a targeted investment rather than foundational work.

Before spending money on the certification, verify that your target job listings specifically mention or value SailPoint certification. In many cases, demonstrated hands-on experience (developer tenant + documented project) is more compelling than the certification alone.

Practical Next Steps

This week: Register for a SailPoint developer tenant through developer.sailpoint.com. Get the environment running and complete the onboarding documentation.

First month: Complete one end-to-end JML workflow — configure a simulated HR source, define birthright access for a role, run a new hire through the joiner workflow, and then run an offboarding. Document it as a case study with the business problem framed first.

Second month: Add an access certification campaign to your portfolio project. Configure a certification campaign for the role you defined, run it in the developer environment, and document the reviewer experience and remediation.

Parallel: Engage with the Compass community. Search for questions your IBM experience would let you answer. Becoming visible as a knowledgeable contributor in the community is a non-trivial career signal.

Application strategy: When applying for SailPoint roles, lead with the governance depth and explicitly name the translation. "5 years of enterprise IGA implementation in IBM IGI, currently building SailPoint ISC hands-on experience through [specific work], with a documented JML workflow and access certification project." That's a stronger positioning than "no SailPoint experience."

Frequently Asked Questions

How do you get SailPoint hands-on experience without a job that uses it?

SailPoint's developer program provides free ISC developer tenant access for building configurations and integrations. Documenting a complete JML workflow — HR source integration, birthright access, offboarding — in this environment and writing it up as a case study demonstrates the hands-on capability that hiring managers look for. SailPoint's training labs provide structured guided practice for specific platform capabilities.

Should you learn SailPoint IIQ or ISC?

For new career entrants, ISC is the better investment — it's where new implementations are happening and where SailPoint's development is concentrated. For practitioners transitioning from other IGA platforms (IBM, Oracle, Sun), ISC's configuration-driven model is also faster to learn than IIQ's Java-based custom logic approach. The exception is if specific target job listings mention IIQ — verify which platform is relevant before investing significant time.

How does IBM IAM experience translate to SailPoint roles?

IBM IGI, ISIM, and ISIG implement the same governance concepts as SailPoint: JML lifecycle management, access certification campaigns, entitlement provisioning, connector architecture, and compliance reporting. The concepts translate directly; the platform-specific terminology and configuration approaches are different. Explicitly mapping your IBM experience to SailPoint's equivalent components in interview conversations makes the translation visible rather than leaving hiring managers to infer it.