IAM Specialist

Profectus Recruitment; Abingdon; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Profectus Recruitment is supporting a public sector IAM programme and seeks an experienced IAM Specialist to lead hands-on SailPoint implementation and IGA configuration. You will join a cyber security team and integrate the IGA with Microsoft Entra ID, connecting HR systems and contractor data.

The role focuses on identity lifecycle management, joiner/mover/leaver automation, automated provisioning, and approval workflows, with responsibilities for SSO, SCIM, and RBAC under ISO 27001 and NIST

Qualifications

• Hands-on delivery of IGA platforms such as SailPoint.
• Strong experience integrating with Microsoft Entra ID.
• Experience connecting HR systems or other authoritative sources.
• Solid understanding of joiner mover leaver automation and identity lifecycle management.
• Experience building approval workflows and access request processes.
• Strong knowledge of SAML, OAuth 2.0, OpenID Connect and SCIM.
• Knowledge of Active Directory, LDAP and hybrid identity.
• Working knowledge of ISO 27001 and NIST CSF.
• Strong troubleshooting and documentation skills.
• Active SC clearance

Responsibilities

• Implement and configure an IGA platform such as SailPoint
• Integrate the IGA solution with Microsoft Entra ID
• Connect authoritative sources including HR systems and contractor databases
• Design and implement joiner mover leaver processes with automated provisioning and deprovisioning
• Build approval workflows for access requests and role assignments
• Configure application connectors for Active Directory, Entra ID, SaaS and on-prem systems
• Implement access certifications, RBAC models and segregation of duties controls
• Configure SSO and federation using SAML, OAuth 2.0, OpenID Connect and SCIM
• Troubleshoot provisioning, synchronisation and connector issues
• Maintain technical documentation and support audit and compliance activities

Skills

SailPoint

Microsoft Entra ID

Identity lifecycle

Joiner/Mover/Leaver

SSO

SCIM

RBAC

ISO 27001

NIST CSF

Active SC clearance

Tools

SAML

OAuth 2.0

OpenID Connect

Job description

Location: Hybrid, approx. 2 days per week on site in Abingdon

Overview

We are supporting a client delivering a large IAM programme for a public sector end client. They require an experienced IAM Specialist with SailPoint to lead the hands-on implementation and configuration of an Identity Governance and Administration (IGA) platform.

You will work within a cyber security team to integrate the IGA solution with Microsoft Entra ID, connect authoritative sources such as HR systems and contractor databases, and build joiner mover leaver processes with automated approval workflows. This is a technical delivery role requiring strong experience in identity lifecycle management and IGA tooling.

Key Responsibilities

• Implement and configure an IGA platform such as SailPoint
• Integrate the IGA solution with Microsoft Entra ID
• Connect authoritative sources including HR systems and contractor databases
• Design and implement joiner mover leaver processes with automated provisioning and deprovisioning
• Build approval workflows for access requests and role assignments
• Configure application connectors for Active Directory, Entra ID, SaaS and on-prem systems
• Implement access certifications, RBAC models and segregation of duties controls
• Configure SSO and federation using SAML, OAuth 2.0, OpenID Connect and SCIM
• Troubleshoot provisioning, synchronisation and connector issues
• Maintain technical documentation and support audit and compliance activities

Essential Skills and Experience

• Hands-on delivery of IGA platforms such as SailPoint
• Strong experience integrating with Microsoft Entra ID
• Experience connecting HR systems or other authoritative sources
• Solid understanding of joiner mover leaver automation and identity lifecycle management
• Experience building approval workflows and access request processes
• Strong knowledge of SAML, OAuth 2.0, OpenID Connect and SCIM
• Knowledge of Active Directory, LDAP and hybrid identity
• Working knowledge of ISO 27001 and NIST CSF
• Strong troubleshooting and documentation skills
• Active SC clearance