Senior SailPoint IdentityIQ IGA Engineer — On-Prem

S&P Global Mobility; London; Hybrid; CAD 104,000 - 156,000; Full time

Benefits offered by this job

Competitive compensation

Health & wellness benefits

Retirement savings

Benefits package

Job summary

Mobility Global is seeking an experienced Identity Governance/IAM professional to maintain and improve on-prem IdentityIQ deployments. You will design JML workflows, certifications, and RBAC/ABAC models to strengthen access controls.

This hybrid Canada-based role offers a base salary range of 104k–156k CAD, plus incentives and benefits. Applicants must be authorized to work in Canada; relocation assistance not provided.

Qualifications

• 6+ years in identity governance/IAM with hands-on SailPoint IdentityIQ experience.
• IdentityIQ depth across applications/connectors, lifecycle events, certifications, roles, workflows, and rules (BeanShell).
• On-premises platform ownership, including installation, configuration, upgrades, and performance tuning.
• Governance fundamentals in access certification, JML, RBAC/ABAC role engineering, and SoD.
• Scripting and integration skill (Java/BeanShell, SQL) and connector configuration for diverse target systems, with an audit/compliance orientation.

Responsibilities

• Configure, operate, and maintain the on-premises IdentityIQ platform, including applications, connectors, rules, workflows, and lifecycle events.
• Design and run access certifications and recertification campaigns, driving certification completion rates and remediating exceptions.
• Implement and mature joiner-mover-leaver (JML) workflows and provisioning/deprovisioning within IdentityIQ.
• Build and maintain RBAC/ABAC roles and entitlement models to simplify access and reduce over-provisioning.
• Implement and enforce Segregation of Duties (SoD) policy and controls, aligned to the Cyber Resilience mapping.
• Produce governance evidence, including certifications, access reviews, and orphaned-account reporting, feeding audit and resilience reporting.
• Own IdentityIQ patching, upgrades, performance, and connector reliability in the on-prem environment.
• Document configuration and standards, cross-train a backup owner, and remove single points of failure around IdentityIQ.

Skills

Identity governance

IAM

BeanShell scripting

Java

SQL

On-premise ownership

Tools

SailPoint IdentityIQ

IdentityIQ connectors

Job description

Mobility Global is seeking an experienced Identity Governance/IAM professional to maintain and improve on-prem IdentityIQ deployments. You will design JML workflows, certifications, and RBAC/ABAC models to strengthen access controls.

This hybrid Canada-based role offers a base salary range of 104k–156k CAD, plus incentives and benefits. Applicants must be authorized to work in Canada; relocation assistance not provided.