Security Lead - SailPoint

Lorien; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Lorien is seeking an experienced Security Lead to design and implement SailPoint Identity Security Cloud solutions on a remote basis for a major insurance broker client.

You will own the backlog, define SoD policies, oversee JML automation with HR systems, and lead a small IAM team to deliver secure identity governance across the organisation.

Qualifications

• 5+ years in IAM/IGA engineering with SailPoint ISC/IIQ experience.
• 3+ years leading IGA engineering teams.
• Experience integrating SailPoint with HR systems, AD/Entra ID and SaaS via SCIM/REST.
• Scripting with Beanshell/Java and Python for automation.
• Familiarity with identity standards: SAML, OAuth2/OIDC, SCIM.
• Experience with ISO 27001, SOC 2, GDPR mappings.
• Experience writing user stories and managing backlogs in an agile environment.
• Strong stakeholder communication; ability to translate tech to non-tech.
• Team leadership and mentoring IAM engineers.

Responsibilities

• Lead design, build and maintenance of SailPoint ISC solutions.
• Own and prioritise the SailPoint/IGA platform backlog and roadmap.
• Oversee JML automation integrating HR systems with SailPoint.
• Define and govern SoD policies and access certification campaigns.
• Act as senior technical authority in IAM.
• Drive solution development focusing on automation and controls.
• Influence stakeholders to align roadmap with risk and regulatory priorities.
• Mentor engineers and drive process improvements and documentation.

Skills

IAM/IGA engineering

SailPoint ISC/IIQ

JML automation

Scripting: Beanshell/Java

Python for automation

Identity governance concepts

SoD / RBAC

Stakeholder communication

Agile backlog management

SCIM/REST integration

Tools

Active Directory/Entra ID

SCIM/REST integration

SailPoint rules (Beanshell/Java)

Job description

Security Lead - SailPoint - Remote Working - Inside IR35

Our client, a leading Insurance broker, are looking to hire an experienced SailPoint Engineering Lead to join the team on a contract basis. This role would be remote working, with adhoc travel to London / Ipswich.

In this role you will be responsible for designing and building SailPoint Identity Security Cloud (ISC) solutions, developing and maintaining Joiner, Mover & Leaver automation, and owning the backlog and roadmap for the clients Identity Governance platform.

Major Accountabilities:

• Lead the design, build and maintenance of SailPoint Identity Security Cloud (ISC) solutions, including source connectors, provisioning workflows and access certification campaigns.
• Own and prioritise the SailPoint/IGA platform backlog, setting technical direction and acting as product owner for the identity platform roadmap based on business risk, compliance deadlines and stakeholder demand.
• Oversee the build and maintenance of Joiner, Mover & Leaver (JML) automation integrating HR systems (Oracle HCM) with SailPoint.
• Define and govern Segregation of Duties (SoD) policies, role models and access certification campaigns.
• Act as the senior technical authority within IAM, covering all aspects of Identity Governance and Administration.
• Drive solution development through problem solving, ensuring adherence to Security Controls, Policies and Standards with a focus on automation and control.
• Influence senior stakeholders across IT, Compliance and the business to align the identity platform roadmap with risk and regulatory priorities.
• Lead the development of skills and capabilities within the IAM team, mentoring engineers and driving process improvements and documentation.

Requirements:

• 5+ years in IAM/IGA engineering, including 3+ years hands-on with SailPoint Identity Security Cloud (ISC) and/or IdentityIQ (IIQ), with demonstrated experience leading IGA engineering teams.
• Strong understanding of IGA concepts: JML lifecycle, access certification, SoD, role-based access control.
• Experience integrating SailPoint with HR systems, Active Directory/Entra ID and SaaS applications via SCIM/REST.
• Scripting proficiency in Beanshell/Java (for SailPoint rules) and Python (for automation and API integration).
• Working knowledge of identity standards: SAML, OAuth2/OIDC, SCIM.
• Experience with access governance frameworks and compliance mapping (ISO 27001, SOC 2, GDPR or similar).
• Demonstrated experience writing user stories, managing a backlog, or working closely with product/agile teams.
• Strong stakeholder communication skills, able to translate technical detail for both engineers and business stakeholders.
• Positive team-first attitude with strong verbal and written communication skills.
• Must possess sound analytical and problem-solving capabilities.