Senior IGA Engineer - SailPoint IdentityIQ (On-Prem)

Mobility Global; London; Hybrid; CAD 104,000 - 156,000; Full time

Job summary

Mobility Global in Canada is seeking an experienced IdentityIQ Engineer/Architect to lead identity governance initiatives. You’ll own SailPoint IdentityIQ configurations, roles, workflows, and SoD mappings, while collaborating across security, IT ops, and risk teams.

The role is hybrid with on-site expectations depending on location; competitive CAD salary and comprehensive benefits are offered in a dynamic automotive data environment.

Qualifications

• 6+ years in identity governance/IAM, with strong hands‑on SailPoint IdentityIQ experience.
• IdentityIQ depth across applications/connectors, lifecycle events, certifications, roles, workflows, and rules (BeanShell).
• On-premises platform ownership, including installation, configuration, upgrades, and performance tuning.
• Governance fundamentals in access certification, JML, RBAC/ABAC role engineering, and Segregation of Duties.
• Scripting and integration skill (Java/BeanShell, SQL) and connector configuration for diverse target systems, with an audit and compliance orientation.

Responsibilities

• Configure, operate, and maintain the on-premises IdentityIQ platform, including applications, connectors, rules, workflows, and lifecycle events.
• Design and run access certifications and recertification campaigns, driving certification completion rates and remediating exceptions.
• Implement and mature joiner-mover-leaver (JML) workflows and provisioning/deprovisioning within IdentityIQ.
• Build and maintain RBAC/ABAC roles and entitlement models to simplify access and reduce over-provisioning.
• Implement and enforce Segregation of Duties (SoD) policy and controls, aligned to the Cyber Resilience control mapping.
• Produce governance evidence, including certifications, access reviews, and orphaned-account reporting, that feeds audit and resilience reporting directly.
• Own IdentityIQ patching, upgrades, performance, and connector reliability in the on-prem environment.
• Document configuration and standards, cross-train a backup owner, and remove single points of failure around IdentityIQ.

Skills

Identity governance/IAM

SailPoint IdentityIQ

IdentityIQ lifecycle & certifications

BeanShell / Java scripting

SQL

On-premises deployment

Tools

IdentityIQ (SailPoint) tool

Job description

Why Mobility Global?

At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we’re creating new opportunities for our customers, our business, and our people.

• 10X Virginia Business Best Places to Work


• 9X Washingtonian Great Places to Work


• 10X Washington Post Top Workplace


• 3X St. Louis Post-Dispatch Best Places to Work

Why Mobility Global?

At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we’re creating new opportunities for our customers, our business, and our people.

Join a team singularly focused on transforming the automotive industry. S&P Global Mobility is Mobility Global — the company behind CARFAX, automotiveMastermind, Market Scan, and Polk Automotive Solutions. Our strength comes from our people, and here, the progress you make helps the entire automotive ecosystem move faster and with greater confidence.

What You’ll Do

• Configure, operate, and maintain the on-premises IdentityIQ platform, including applications, connectors, rules, workflows, and lifecycle events.


• Design and run access certifications and recertification campaigns, driving certification completion rates and remediating exceptions.


• Implement and mature joiner-mover-leaver (JML) workflows and provisioning/deprovisioning within IdentityIQ.


• Build and maintain RBAC/ABAC roles and entitlement models to simplify access and reduce over-provisioning.


• Implement and enforce Segregation of Duties (SoD) policy and controls, aligned to the Cyber Resilience control mapping.


• Produce governance evidence, including certifications, access reviews, and orphaned-account reporting, that feeds audit and resilience reporting directly.


• Own IdentityIQ patching, upgrades, performance, and connector reliability in the on-prem environment.


• Document configuration and standards, cross-train a backup owner, and remove single points of failure around IdentityIQ.

Required Qualifications

• 6+ years in identity governance/IAM, with strong hands‑on SailPoint IdentityIQ experience.


• IdentityIQ depth across applications/connectors, lifecycle events, certifications, roles, workflows, and rules (BeanShell).


• On-premises platform ownership, including installation, configuration, upgrades, and performance tuning.


• Governance fundamentals in access certification, JML, RBAC/ABAC role engineering, and Segregation of Duties.


• Scripting and integration skill (Java/BeanShell, SQL) and connector configuration for diverse target systems, with an audit and compliance orientation.

Preferred Qualifications

• SailPoint certification (IdentityIQ Engineer/Architect) or equivalent demonstrated expertise.


• Experience planning IGA modernization (on-prem to SaaS/ISC migration or hybrid).


• Familiarity with PAM and Access Management integration points.


• Exposure to agentic AI for first-line access review with human-in-the-loop controls.

This is a hybrid role with in-office expectations determined by location and subject to change based on evolving business needs.

Applicants must be legally authorized to work in Canada at the time of hire. The company is unable to provide immigration or work permit support for this position.

The anticipated annual base salary range for this position is $104,000 - $156,000. Actual compensation within this range will be determined based on a variety of factors, including geographic location, relevant experience, skills, qualifications, and internal equity considerations.

Mobility Global is committed to providing competitive compensation that reflects local market conditions and individual contributions. In addition to base salary, employees may be eligible for incentive compensation, long‑term incentives, and a comprehensive benefits package, where applicable.

What’s In It For You

• Competitive compensation package, including base salary and incentive opportunities where applicable.


• Comprehensive health and wellness benefits for employees and eligible dependents.


• Retirement savings programs, including company matching contributions where available.


• For more information on benefits, please visit us at https://mobilityglobalbenefits.com/ourbenefits

Equal Opportunity Employer

Mobility Global is proud to be an Equal Opportunity Employer. We value diverse perspectives and are committed to fostering an inclusive workplace where everyone is respected, supported, and empowered to succeed. We provide reasonable accommodations throughout the hiring process and employment for qualified individuals with disabilities.

Recruitment Fraud Alert

Mobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.