SailPoint Roadmap

Quick answer

The SailPoint roadmap has seven stages: IAM fundamentals, technical prerequisites (Java, SQL, XML, Active Directory/LDAP, REST), IdentityIQ core, Identity Security Cloud, portfolio projects, certification and job preparation, which takes most learners about 6 months at 10 to 15 hours a week. Start with concepts, not tools. Learn IdentityIQ first, because Indian job listings name it far more often, then add the cloud product. Build three small projects you can explain in an interview. Take a certification once you have hands-on practice, not before. Then apply for IAM operations and support roles as well as developer roles.

Key takeaways

1. SailPoint roadmap at a glance

Short answer: Seven stages over about 24 weeks, each ending with a checkpoint you can show someone.

Use this table as your map. The weeks assume 10 to 15 hours of study a week alongside college or a job. If you study full time, you can roughly halve each stage, except the projects, which always take longer than planned.

2. Before you start: a quick self-check

Short answer: Rate yourself on six skills before Week 1, so you know which stages you can shorten and which need extra time.

Score each skill from 0 (never used it) to 2 (use it comfortably). It simply tells you where to spend your hours.

A total of 9 or more means you can move faster through Stage 2. A total under 5 means you should follow the full plan and not skip ahead to IdentityIQ screens. Service desk staff usually score high on AD and low on Java; Java developers the other way round.

3. Stage 1: IAM fundamentals (Weeks 1 to 2)

Short answer: Learn the ideas SailPoint automates: who gets access, why, for how long, and who checks it.

Identity and access management (IAM) is the broad discipline of managing identities and their access. NIST describes it as managing individual identities and, in enterprise IT, setting up and maintaining users' roles and access privileges (NIST glossary, October 2026). SailPoint sits in one part of IAM called identity governance and administration (IGA): the layer that makes sure people have the right access, keeps it compliant and proves it to auditors.

Learn these terms until you can explain each one with an example from a company you know:

A simple worked example helps everything click. Priya joins a Hyderabad bank's India centre as a credit analyst (joiner). HR adds her record. She needs an AD account, email, a loan system role and read access to a reports folder. Six months later she moves to risk (mover): the loan role should go and a risk tool role should come. A year later she resigns (leaver): every account must be disabled the same day. Every quarter, her manager reviews her access (certification). An IGA tool like SailPoint automates all of this and keeps evidence.

Checkpoint: draw Priya's journey on one page, with each system and each event. If you can do it without notes, Stage 1 is done.

4. Stage 2: Technical prerequisites (Weeks 3 to 5)

Short answer: Learn enough Java, SQL, XML, directory and API skills to read and write SailPoint configuration and rules with confidence.

SailPoint is not a "no code" career at the developer level. IdentityIQ rules are written in BeanShell, which is Java-based and can use the Java classes available to IdentityIQ, and objects can be imported as XML (SailPoint documentation, October 2026). Indian job descriptions read on 24 October 2026 repeatedly asked for Java, BeanShell, SQL, REST APIs, Active Directory and LDAP.

A good weekly split for Stage 2:

Checkpoint: write a Java program that reads a CSV of employees, finds people with no manager and prints them. Then write the same check as an SQL query. This is close to real SailPoint data work.

5. Stage 3: IdentityIQ core (Weeks 6 to 11)

Short answer: Learn how IdentityIQ models identities and access, then practise the core loop: onboard, aggregate, correlate, model roles, set policies, certify and automate lifecycle events.

IdentityIQ is SailPoint's self-managed (on-premises or customer-hosted) identity governance product. It is a Java web application that runs on an application server with a relational database. IdentityIQ 9.0 was announced on 6 October 2026, and from 9.0 Oracle WebLogic is no longer a supported application server (SailPoint, October 2026). For a full product explanation, read our guide to SailPoint IdentityIQ.

Learn the topics in this order, one week at a time:

Our hands-on SailPoint tutorial walks through each of these as numbered lab lessons, so use it alongside this stage.

A note on practice environments: use official routes only, such as SailPoint training on Identity University, a partner or employer lab, or a training institute's licensed lab. Do not download unofficial builds from file-sharing sites. Apart from the legal problem, they can carry malware and teach you outdated versions.

Checkpoint: in a lab, onboard an HR CSV and an AD or JDBC application, aggregate both, fix one uncorrelated account, create one business role with an IT role behind it, and run a manager certification that revokes one entitlement.

6. Stage 4: Identity Security Cloud (Weeks 12 to 15)

Short answer: Once IdentityIQ makes sense, learn the SaaS product, which uses the same governance ideas with different building blocks.

Naming has changed twice, so get it straight first. Identity Security Cloud (ISC, formerly IdentityNow, now sold as SailPoint Human Fabric within SailPoint Identity Security) is SailPoint's cloud-native SaaS product. On 4 August 2026, SailPoint described Human Fabric as the evolution of Identity Security Cloud, delivered inside the unified SailPoint Identity Security solution alongside Agentic Fabric (SailPoint, August 2026). Exams, documentation titles and Indian job posts still mostly say "Identity Security Cloud" or "ISC", so use that name on your resume too.

Map each IdentityIQ idea to its ISC version:

Week by week:

Should you learn IdentityIQ or ISC first? For most Indian learners, IdentityIQ first. On 24 October 2026, Naukri showed about 796 results for "sailpoint identityiq" and about 69 for "identitynow". These are keyword counts, and many cloud listings write "SailPoint ISC" instead, so treat this as a rough signal. Still, large IT services firms and Big Four firms in Hyderabad, Bengaluru and Pune keep running big IdentityIQ estates, and IIQ teaches you the deeper model. If your target employer is clearly cloud-first, swap Stages 3 and 4.

Checkpoint: for every row of the table above, explain the IdentityIQ way and the ISC way in two sentences each.

7. Stage 5: Portfolio projects (Weeks 14 to 19)

Short answer: Build three small, fictional, well-documented projects that prove you can deliver the work JDs describe.

Projects matter because most real JDs ask for implementation experience you do not have yet. A clear project write-up is the honest way to show skill. Label every project as a training or lab project on your resume. Never present it as client work.

How to present each project:

Keep each write-up to two pages. Interviewers in India often ask you to walk them through a project for 10 minutes, and a tidy document helps you do that calmly.

Checkpoint: three projects, each with a two-page write-up, stored where you can share a link.

8. Stage 6: Certification (Weeks 18 to 21)

Short answer: Take the training-based IdentityIQ Associate exam first if you are new, and keep the role-based engineer and administrator exams for after you have real hands-on time.

SailPoint's certification and credentialing program page (last updated 23 September 2026) lists seven credentials. Three are role-based certifications, valid for two years: SailPoint Certified Identity Security Administrator, SailPoint Certified Identity Security Engineer and SailPoint Certified IdentityIQ Engineer. Four are training-based credentials that do not expire: SailPoint Identity Security Leader Credential, SailPoint Identity Security Professional, SailPoint Identity Security Expert and SailPoint Certified IdentityIQ Associate (SailPoint, October 2026).

Where each fits on your roadmap:

Useful rules to know before you book:

Be realistic about value. In the job descriptions we read on 24 October 2026, EY and PwC listed SailPoint certification as "desirable" or "good to have", and none made it mandatory. The certificate helps your resume pass a filter. Your projects and interview answers get you the offer. For exam formats, domains and a study plan, see our full guide to SailPoint certification.

Checkpoint: you have booked or passed the exam that matches your current experience, not the most senior one.

9. Stage 7: Job preparation (Weeks 20 to 24)

Short answer: Turn your skills into interviews with a focused resume, practised answers and applications aimed at roles that actually hire juniors.

Start by understanding the market honestly. On 24 October 2026, Naukri showed about 5,550 results for "sailpoint" across India, about 1,866 in Bengaluru, 934 in Hyderabad, 762 in Pune and 516 in Chennai. These are keyword-match counts that include duplicates and loosely related roles, not a count of open SailPoint jobs. Almost every SailPoint developer JD we read asked for 3 or more years of experience, and we found no SailPoint developer listing on Naukri or LinkedIn that genuinely accepted 0 years. Junior entry points were IAM operations, access management and support roles.

Your job prep, step by step:

Know the shifts too. One Deloitte ISC posting listed an 11 AM to 8 PM shift and another a US shift, ICE asked for 17x5 rotational shifts and EY's managed services role mentioned on-call support (listings read 24 October 2026).

What pay to expect: on AmbitionBox, the 1 to 3 year band for SailPoint developers in India was about ₹5 to 5.6 lakh a year (175 salaries) and the 3 to 6 year band about ₹8.4 to 9.2 lakh (384 salaries) in October 2026. These are typical ranges shown to logged-out users, not offers, and AmbitionBox shows no 0 to 1 year band.

Checkpoint: a resume reviewed by someone in IAM, a mock interview you passed and at least 30 targeted applications.

10. 6-month SailPoint plan (week by week)

Short answer: About 10 to 15 hours a week for 24 weeks takes you from zero to job-ready, if you keep each week's output small and real.

If you fall behind, cut breadth, not depth. It is better to know aggregation, correlation and certifications very well than to have touched every module once.

11. Roadmap by background

Short answer: Your starting point changes which stages you can shorten and which first job you should aim for.

Freshers. Follow the full 24 weeks, say honestly that your experience is lab-based, and apply to operations and support roles at managed services teams and GCCs. Many listings accept "any graduate" with IT knowledge, while some ask for B.Tech or a CS/IT degree.

Java developers. Move through Stage 2 in a week and spend the saved time on Stages 1 and 3, because your gap is governance thinking, not code. Your Java experience counts towards the "3+ years" most JDs ask for, so target developer roles directly.

AD admins and service desk staff. You already do joiner and leaver tickets by hand, which is exactly what SailPoint automates. Give Java and BeanShell an extra two weeks and write a few small rules. Operations JDs asking for joiner-mover-leaver troubleshooting with PowerShell, Python and BeanShell scripting fit you well.

Testers. IGA projects need strong testing of provisioning, certifications and workflows, and one Bengaluru listing we saw was for IAM quality assurance and SailPoint testing. Use your test-case skill in every project write-up and build up Java to move into development later.

12. SailPoint's own product roadmap for 2026

Short answer: SailPoint is investing in both products: a unified cloud platform for human and AI-agent identities, and a modernised IdentityIQ 9.0 for self-managed customers.

Some people search "SailPoint roadmap" to learn where the product is going. Here is what SailPoint has announced, with dates:

Agentic Fabric is SailPoint's identity security for AI agents and non-human identities. It is organised as Discover (find agents, machine identities and the credentials they use), Govern (map each agent's access and tie it to a human owner) and Protect (monitor behaviour and remediate automatically, including a "kill switch"). SailPoint Atlas is the shared foundation underneath, with services such as Connectivity, Data Model, Identity Graph, Policy Engine and Risk Engine (SailPoint, October 2026).

IdentityIQ 9.0 adds granular time-based access with start and end times for roles and entitlements, a rebuilt foundation on modern application servers, a refreshed interface for access reviews and application definition, and an automated upgrade tool. SailPoint's IdentityIQ 9.0 announcement positions it for customers with data residency, regulatory or heavy customisation needs (SailPoint, October 2026). Exact 9.0 Java and server versions were not published in what we checked, so do not memorise version numbers from old blogs.

Is IdentityIQ being replaced? We found no end-of-life statement. The 9.0 release calls it a parallel modernisation path, so IdentityIQ skills stay useful while cloud skills grow in value. For your roadmap, this means three things: learn IdentityIQ deeply, add ISC, and keep an eye on non-human and AI-agent identity, which is where SailPoint's newest products point.

13. Beyond your first job: the longer roadmap

Short answer: After the 6-month plan, the next 5 to 10 years usually run from analyst or developer to senior developer, consultant and architect.

Here is a typical ladder, with AmbitionBox typical ranges for India in October 2026 where a matching profile exists. Read them as rough guides; samples vary.

To climb, add one layer at a time: lead a full implementation, learn the cloud product deeply, understand a second IAM area such as PAM or access management, and practise talking to business owners and auditors. The IdentityIQ Engineer and Identity Security Engineer certifications fit naturally around year two or three.

14. Mistakes to avoid on your SailPoint roadmap

Short answer: Most learners stall because they skip concepts, avoid Java or chase badges before skills.

15. How Brolly Academy helps

Short answer: Brolly Academy's SailPoint course covers Stages 3, 5 and 7 of this roadmap in a structured 2-month program with mentor support.

The Brolly Academy SailPoint Certification Training in Hyderabad is IdentityIQ-focused, with an introduction to IdentityNow (Brolly Academy course page, October 2026). Here is what the page lists:

You still own Stages 1, 2 and 4 to some degree: brush up Java and SQL before you join, and add Identity Security Cloud practice after the IdentityIQ modules.

Frequently asked questions