IAM Engineer - SailPoint IIQ - Senior - EY GDS

EY; Buenos Aires; On-site; ARS 2,500,000 - 6,000,000; Full time

Job summary

Ernst & Young Advisory Services Sdn Bhd in Argentina seeks an IAM Engineer to implement and maintain SailPoint IIQ, support identity governance and user lifecycle processes within a large enterprise.

You will configure IIQ workflows, integrate applications via REST APIs, troubleshoot provisioning, and support RBAC/SoD initiatives as part of a senior team. Experience with enterprise apps and ITSM is valued.

Qualifications

• 3-5 years of IAM/IGA experience.
• Hands-on SailPoint IdentityIQ (IIQ).
• Strong knowledge of JML, RBAC and SoD.
• Experience with IIQ workflows, rules, forms, and certifications.
• REST API integrations and system integrations.
• Scripting in Java, BeanShell, Python or PowerShell.
• Knowledge of ITSM tools like ServiceNow/JIRA.

Responsibilities

• Work on user lifecycle management (Joiner, Mover, Leaver).
• Support access provisioning and deprovisioning across enterprise apps.
• Manage access certifications, attestations, and compliance.
• Configure SailPoint IIQ workflows, rules, provisioning policies, approvals.
• Develop/integrate applications using REST APIs and SailPoint connectors.
• Troubleshoot provisioning, reconciliation, and identity issues.
• Support RBAC and entitlement governance initiatives.
• Provide L2/L3 incident and service request support.
• Participate in UAT, deployment, and post-production support.
• Create technical docs and runbooks.

Skills

IAM/IGA

SailPoint IIQ

Joiner/Mover/Leaver

RBAC

Segregation of Duties (SoD)

REST APIs

BeanShell/Java/Python/PowerShell

ServiceNow/JIRA knowledge

Tools

SailPoint IIQ components

REST API integrations

JIRA

ServiceNow

Job description

Fecha: 3 sept 2026

Job Title: IAM Engineer – SailPoint IIQ
Location: Argentina
Rank: Senior 1-2
Service Line: Cybersecurity – Identity & Access management

Role Summary

Looking for an IAM Engineer with hands-on experience in SailPoint Identity IQ (IIQ) to support identity governance, access management, and user lifecycle processes within a large enterprise environment. The role involves implementing and maintaining Identity Governance and Administration (IGA) capabilities, supporting integrations with enterprise applications, and ensuring compliance with security and governance requirements.

Core Responsibilities

• Work on user lifecycle management processes (Joiner, Mover, Leaver).
• Support access provisioning and deprovisioning across enterprise applications.
• Manage access certifications, attestation campaigns, and compliance activities.
• Configure and maintain SailPoint IIQ workflows, rules, provisioning policies, and approval processes.
• Develop or support application integrations using REST APIs, web services, and SailPoint connectors.
• Troubleshoot provisioning, aggregation, reconciliation, and identity-related issues.
• Support role management, RBAC implementation, and entitlement governance initiatives.
• Provide L2/L3 support, including incident management, service requests, and root cause analysis.
• Participate in UAT, deployment, and post-production support activities.
• Create and maintain technical documentation, operational runbooks, and knowledge articles.

Required Skills

• 3-5 years of experience in IAM / Identity Governance and Administration (IGA).
• Hands-on experience with SailPoint IdentityIQ (IIQ).
• Strong understanding of:
• Identity Lifecycle Management (Joiner, Mover, Leaver)
• Access Provisioning & Deprovisioning
• Access Governance and Certifications
• Role-Based Access Control (RBAC)
• Segregation of Duties (SoD)
• Experience with SailPoint IIQ components such as:
• Workflows
• Rules (BeanShell)
• Forms
• Certifications
• Provisioning Policies
• Application Onboarding
• Experience with REST APIs and system integrations.
• Scripting knowledge in Java, BeanShell, Python, or PowerShell.
• Familiarity with ticketing tools such as ServiceNow, JIRA, or similar ITSM platforms.
• Strong troubleshooting, analytical, and problem-solving skills

Good to Have

• Experience working in large enterprise or global IAM environments.
• Exposure to Active Directory, Microsoft Entra ID (Azure AD), LDAP, AWS IAM, or other identity platforms.
• Experience integrating SailPoint IIQ with enterprise systems such as SAP, Oracle, Salesforce, or ServiceNow.
• Understanding compliance, audit, and governance frameworks.
• Knowledge of authentication and federation standards such as SAML, OAuth, OIDC, and SCIM.
• Experience supporting SailPoint IIQ upgrades, deployments, and enhancement projects.
• SailPoint IdentityIQ certification or other IAM/Security certifications.
• Experience working in Agile delivery environments.

SAP as service provider

LinkedIn