Identity & Access Management Specialist

Tria; Abingdon; On-site; GBP 86,000 - 117,000; Full time

Job summary

Tria is seeking an experienced IAM Specialist with strong SailPoint expertise to join a security‑focused implementation project in Abingdon. This hands‑on role requires delivering SailPoint/Iga configuration, integrating with Entra ID, HR systems and designing automated Joiner‑Mover‑Leaver processes.

The contract is 6 months, outside IR35, paying £550 per day, with a mix of onsite work (Abingdon) three days per week and collaboration with HR, IT operations and application owners to ensure

Qualifications

• Strong hands‑on experience implementing and configuring SailPoint (IdentityIQ / IdentityNow / Identity Security Cloud).
• Strong IGA / Identity Governance experience.
• Proven experience integrating IGA with Microsoft Entra ID / Azure AD.

Responsibilities

• Implement and configure SailPoint / IGA solutions.
• Integrate SailPoint with Microsoft Entra ID / Azure AD.
• Connect HR systems and other identity sources.
• Design automated Joiner-Mover-Leaver provisioning and deprovisioning.
• Build approval workflows for access requests and role assignments.
• Configure access certification and attestation campaigns.
• Develop RBAC, role mining and entitlement models.
• Configure application connectors across AD, Entra ID, SaaS and on-prem systems.
• Implement SoD policies and access risk controls.
• Troubleshoot provisioning and connector issues.
• Support onboarding and define access models with owners.
• Produce technical documentation and runbooks.
• Support audit and compliance activities.

Skills

SailPoint implementation

Identity Governance

Entra ID / Azure AD integration

JML provisioning

RBAC & SoD

Application connectors

SAML/OIDC/SCIM

AD/LDAP hybrid identity

Provisioning troubleshooting

Tools

SailPoint

Microsoft Entra ID / Azure AD

Job description

IAM Specialist - SailPoint

Live security clearance essential

Abingdon - 3 days a week onsite

6 month contract - £550 a day outside IR35

I'm currently recruiting for an experienced IAM Specialist with strong SailPoint / Identity Governance (IGA) experience to join a cyber security team on a technically focused implementation project.

This is a hands‑on role where you'll be responsible for the implementation and configuration of an IGA solution, integrating it with Microsoft Entra ID, HR and contractor systems, and designing automated Joiner-Mover-Leaver (JML) processes.

You'll work closely with HR, IT operations and application owners to ensure identity data flows correctly and users receive the appropriate access throughout the identity lifecycle.

Key responsibilities:

• Implement and configure SailPoint / IGA solutions
• Integrate SailPoint with Microsoft Entra ID / Azure AD
• Connect HR systems and other authoritative identity sources
• Design and configure automated JML provisioning and deprovisioning
• Build approval workflows for access requests and role assignments
• Configure access certification, recertification and attestation campaigns
• Develop RBAC, role mining and entitlement models
• Configure application connectors across AD, Entra ID, SaaS and on‑premise systems
• Implement Segregation of Duties (SoD) policies and access risk controls
• Troubleshoot provisioning, synchronisation and connector issues
• Support application onboarding and define access models with application owners
• Produce technical documentation, configuration guides and runbooks
• Support audit and compliance activities

You’ll need:

• Strong hands‑on experience implementing and configuring SailPoint - ideally IdentityIQ, IdentityNow or Identity Security Cloud
• Strong IGA / Identity Governance experience
• Proven experience integrating IGA solutions with Microsoft Entra ID / Azure AD
• Strong understanding of JML / identity lifecycle management
• Experience with provisioning, deprovisioning, access requests and approval workflows
• Experience with access certification / recertification and entitlement management
• Knowledge of RBAC, role mining and SoD
• Experience configuring application connectors and integrating target systems
• Good understanding of SAML, OAuth 2.0, OpenID Connect and SCIM
• Strong Active Directory / LDAP and hybrid identity knowledge
• Experience troubleshooting identity provisioning and integration issues
• Current SC clearance or the ability to obtain SC clearance
• Experience within UK public sector, defence or critical national infrastructure environments would be advantageous.

SailPoint experience is essential for this position, and we're particularly interested in candidates who have been involved in the hands‑on implementation and configuration of SailPoint rather than purely supporting an existing IAM environment