IAM Engineer - SailPoint IIQ - Senior - EY GDS

EY; Buenos Aires; Presencial; ARS 67.910.000 - 113.184.000; Jornada completa

Descripción de la vacante

EY is seeking an IAM Engineer with hands-on SailPoint IdentityIQ experience to support identity governance, access management and user lifecycle processes in a large enterprise environment.

You will implement and maintain IGA capabilities, integrate systems via REST APIs and SailPoint connectors, and ensure security governance, compliance and timely incident management.

Formación

• 3-5 years IAM/IGA experience in large enterprises.
• Hands-on SailPoint IIQ experience required.
• Experience with Identity Lifecycle Management (Joiner/Mover/Leaver).
• Proficiency in REST APIs and system integrations.
• Strong RBAC and SoD knowledge for access governance.
• Familiarity with ITSM tools like ServiceNow or JIRA.
• Agile delivery experience a plus.

Responsabilidades

• Work on user lifecycle management (Joiner/Mover/Leaver).
• Support access provisioning and deprovisioning across apps.
• Manage access certifications and attestation campaigns.
• Configure and maintain SailPoint IIQ workflows and provisioning policies.
• Develop integrations using REST APIs and SailPoint connectors.
• Troubleshoot provisioning, reconciliation and identity issues.
• Support RBAC implementation and entitlement governance.
• Provide L2/L3 incident management and service requests.
• Participate in UAT, deployment and post-production support.
• Create technical documentation and runbooks.

Conocimientos

SailPoint IIQ

IAM/IGA

RBAC

SoD

REST APIs

Java/BeanShell/Python

Troubleshooting

ServiceNow/JIRA

Herramientas

SailPoint IIQ components

Descripción del empleo

Job Title: IAM Engineer – SailPoint IIQ

Location: Argentina

Rank: Senior

Service Line: Cybersecurity – Identity & Access management

Role Summary

Looking for an IAM Engineer with hands-on experience in SailPoint Identity IQ (IIQ) to support identity governance, access management, and user lifecycle processes within a large enterprise environment. The role involves implementing and maintaining Identity Governance and Administration (IGA) capabilities, supporting integrations with enterprise applications, and ensuring compliance with security and governance requirements.

Core Responsibilities

• Work on user lifecycle management processes (Joiner, Mover, Leaver).
• Support access provisioning and deprovisioning across enterprise applications.
• Manage access certifications, attestation campaigns, and compliance activities.
• Configure and maintain SailPoint IIQ workflows, rules, provisioning policies, and approval processes.
• Develop or support application integrations using REST APIs, web services, and SailPoint connectors.
• Troubleshoot provisioning, aggregation, reconciliation, and identity-related issues.
• Support role management, RBAC implementation, and entitlement governance initiatives.
• Provide L2/L3 support, including incident management, service requests, and root cause analysis.
• Participate in UAT, deployment, and post-production support activities.
• Create and maintain technical documentation, operational runbooks, and knowledge articles.

Required Skills

• 3-5 years of experience in IAM / Identity Governance and Administration (IGA).
• Hands-on experience with SailPoint IdentityIQ (IIQ).
• Strong understanding of:
• Identity Lifecycle Management (Joiner, Mover, Leaver)
• Access Provisioning & Deprovisioning
• Access Governance and Certifications
• Role-Based Access Control (RBAC)
• Segregation of Duties (SoD)
• Experience with SailPoint IIQ components such as:
• Workflows
• Rules (BeanShell)
• Forms
• Certifications
• Provisioning Policies
• Application Onboarding
• Experience with REST APIs and system integrations.
• Scripting knowledge in Java, BeanShell, Python, or PowerShell.
• Familiarity with ticketing tools such as ServiceNow, JIRA, or similar ITSM platforms.
• Strong troubleshooting, analytical, and problem-solving skills

Good to Have

• Experience working in large enterprise or global IAM environments.
• Exposure to Active Directory, Microsoft Entra ID (Azure AD), LDAP, AWS IAM, or other identity platforms.
• Experience integrating SailPoint IIQ with enterprise systems such as SAP, Oracle, Salesforce, or ServiceNow.

Understanding compliance, audit, and governance frameworks.

• Knowledge of authentication and federation standards such as SAML, OAuth, OIDC, and SCIM.
• Experience supporting SailPoint IIQ upgrades, deployments, and enhancement projects.
• SailPoint IdentityIQ certification or other IAM/Security certifications.
• Experience working in Agile delivery environments.