IAM Engineer - SailPoint IIQ - Senior - EY GDS

EY; Tandil; Presencial; ARS 1.000.000 - 1.600.000; Jornada completa

Descripción de la vacante

EY is seeking an IAM Engineer with hands-on SailPoint IdentityIQ experience to support identity governance, access management, and user lifecycle processes within a large enterprise. The role involves implementing and maintaining Identity Governance and Administration capabilities and integrating with enterprise applications via REST APIs and SailPoint connectors.

You will participate in UAT, deployments, and post-production support, and contribute to security governance and compliance

Formación

• 3-5 years of IAM/IGA experience.
• Hands-on experience with SailPoint IdentityIQ (IIQ).
• Strong knowledge of Identity Lifecycle Management (Joiner, Mover, Leaver).
• Experience with Access Provisioning & Deprovisioning.
• Experience with Access Governance and Certifications.
• Familiarity with RBAC and SoD concepts.
• Experience with SailPoint IIQ components such as Workflows, Rules (BeanShell), Forms, Certifications, Provisioning Policies, Application Onboarding.
• Experience with REST APIs and system integrations.
• Scripting knowledge in Java, BeanShell, Python, or PowerShell.
• Familiarity with ITSM tools like ServiceNow or JIRA.

Responsabilidades

• Work on user lifecycle management processes (Joiner, Mover, Leaver).
• Support access provisioning and deprovisioning across enterprise applications.
• Manage access certifications, attestation campaigns, and compliance activities.
• Configure and maintain SailPoint IIQ workflows, rules, provisioning policies, and approval processes.
• Develop or support application integrations using REST APIs, web services, and SailPoint connectors.
• Troubleshoot provisioning, aggregation, reconciliation, and identity-related issues.
• Support role management, RBAC implementation, and entitlement governance initiatives.
• Provide L2/L3 support, including incident management, service requests, and root cause analysis.
• Participate in UAT, deployment, and post-production support activities.
• Create and maintain technical documentation, operational runbooks, and knowledge articles.

Conocimientos

SailPoint IIQ

IAM/IGA

Lifecycle Management

RBAC

SoD

REST APIs

Java/BeanShell/Python

ITSM Tools (ServiceNow/JIRA)

Herramientas

SailPoint IIQ

BeanShell

REST APIs

Descripción del empleo

Job Title: IAM Engineer – SailPoint IIQ

Location: Argentina

Rank: Senior

Service Line: Cybersecurity – Identity & Access management

Role Summary

Looking for an IAM Engineer with hands‑on experience in SailPoint Identity IQ (IIQ) to support identity governance, access management, and user lifecycle processes within a large enterprise environment. The role involves implementing and maintaining Identity Governance and Administration (IGA) capabilities, supporting integrations with enterprise applications, and ensuring compliance with security and governance requirements.

Core Responsibilities

• Work on user lifecycle management processes (Joiner, Mover, Leaver).
• Support access provisioning and deprovisioning across enterprise applications.
• Manage access certifications, attestation campaigns, and compliance activities.
• Configure and maintain SailPoint IIQ workflows, rules, provisioning policies, and approval processes.
• Develop or support application integrations using REST APIs, web services, and SailPoint connectors.
• Troubleshoot provisioning, aggregation, reconciliation, and identity‑related issues.
• Support role management, RBAC implementation, and entitlement governance initiatives.
• Provide L2/L3 support, including incident management, service requests, and root cause analysis.
• Participate in UAT, deployment, and post‑production support activities.
• Create and maintain technical documentation, operational runbooks, and knowledge articles.

Required Skills

• 3-5 years of experience in IAM / Identity Governance and Administration (IGA).
• Hands‑on experience with SailPoint IdentityIQ (IIQ).
• Strong understanding of:
• Identity Lifecycle Management (Joiner, Mover, Leaver)
• Access Provisioning & Deprovisioning
• Access Governance and Certifications
• Role-Based Access Control (RBAC)
• Segregation of Duties (SoD)
• Experience with SailPoint IIQ components such as:
• Workflows
• Rules (BeanShell)
• Forms
• Certifications
• Provisioning Policies
• Application Onboarding
• Experience with REST APIs and system integrations.
• Scripting knowledge in Java, BeanShell, Python, or PowerShell.
• Familiarity with ticketing tools such as ServiceNow, JIRA, or similar ITSM platforms.
• Strong troubleshooting, analytical, and problem‑solving skills

Good to Have

• Experience working in large enterprise or global IAM environments.
• Exposure to Active Directory, Microsoft Entra ID (Azure AD), LDAP, AWS IAM, or other identity platforms.
• Experience integrating SailPoint IIQ with enterprise systems such as SAP, Oracle, Salesforce, or ServiceNow.

Understanding compliance, audit, and governance frameworks.

• Knowledge of authentication and federation standards such as SAML, OAuth, OIDC, and SCIM.
• Experience supporting SailPoint IIQ upgrades, deployments, and enhancement projects.
• SailPoint IdentityIQ certification or other IAM/Security certifications.
• Experience working in Agile delivery environments.