SailPoint Developer- IAM

METRO Global Solution Center IN; Maharashtra; On-site; INR 1,600,000 - 2,600,000; Full time

Job summary

METRO Global Solution Center in Pune, India, is seeking a Solution Expert for Identity & Access Management focusing on SailPoint ISC. You will drive migration from a legacy IAM to a modern cloud‑based SailPoint landscape and design automated provisioning and access governance.

You will work with product and engineering teams to manage stakeholders and ensure secure integrations with AD/Entra and business apps, delivering end‑to‑end IAM solutions while reducing risk and technical debt.

Qualifications

• 5+ years designing, implementing or operating enterprise IAM in complex IT environments.

Responsibilities

• Own SailPoint ISC configurations, workflows and integrations.
• Lead migration from legacy IAM to SailPoint ISC, including analysis and cut‑over planning.
• Design and implement automated provisioning/de‑provisioning, certification campaigns and access governance processes.
• Design and implement complex workflows, provisioning rules, and policies; develop and maintain custom connectors and integrations.
• Collaborate with engineers and vendors to implement, test and optimise SailPoint‑based solutions within a cloud environment, including enhancement scripts, rules and provisioning logic.
• Support incident and problem management for IAM topics, including root‑cause analysis and remediation.
• Work closely with security, workplace and application teams to define integration patterns and ensure secure end‑to‑end data flows.
• Contribute to and review technical documentation, architecture decisions and design guidelines for IAM capabilities.
• Act as a trusted counterpart to stakeholders (solution owners, platform leads, external partners), explaining options, risks and trade‑offs.
• Provide guidance and knowledge transfer to team members and partners on SailPoint ISC capabilities and best practices.
• Continuously identify improvement opportunities to reduce manual work, technical debt and operational risk within the IAM landscape.

Skills

SailPoint ISC

Cloud architectures

REST APIs

AD/Entra integration

RBAC/ABAC

OAuth/SAML/OpenID Connect

GitLab CI/CD

Stakeholder management

Agile delivery

English proficiency

Education

Graduation or Post-Graduation

Tools

Active Directory

Entra ID

Job description

About us

Passion for food. Hunger for tech. We make METRO digital.

Today technology is driving the world. And at METRO.digital we are driving the technology for one of the leading international wholesalers specializing in food – METRO. From e‑commerce to checkout and delivery software, we work on a wide range of products to make each day a success for our customers and colleagues. With passion and ownership, we build the future of wholesale.

You are driven to create smart solutions for customers around the globe? You want to grow in a flexible environment? Let the right career opportunity find you and join us!

Job Description

Join the Cyber Security Platform as a Solution Expert for Identity & Access Management, focusing on SailPoint Identity Security Cloud (ISC). You will collaborate with product and engineering teams, driving migration from a legacy, custom‑built IAM solution to a modern, cloud‑based SailPoint landscape. Your role involves designing and implementing robust identity lifecycle and access provisioning flows, ensuring secure integrations with Active Directory and business applications. By combining technical depth with stakeholder management skills, you shape the target architecture for employee IAM across the organization, directly reducing operational risk, technical debt, and security exposure.

Company Description

Metro Global Solution Center (MGSC) is the internal solution partner for METRO, a €29.8 billion international wholesaler operating in 32 countries through 625 stores and a global workforce of 91,000 people. METRO also runs a Food Service Distribution business in 10 additional countries, totaling 34 countries of operation. MGSC’s locations are in Pune (India), Düsseldorf (Germany) and Szczecin (Poland). We provide HR, Finance, IT and business operations support to 31 countries, speaking 24+ languages and processing over 18,000 transactions a day. We set tomorrow’s standards for customer focus, digital solutions and sustainable business models, delivering high‑quality service and value to our internal customers.

How you will make an impact

You will lead the migration from legacy IAM components to SailPoint ISC, including analysis, cut‑over planning, and decommissioning activities. You will design and implement automated provisioning/de‑provisioning, certification campaigns and access governance processes (joiner/mover/leaver, role changes, company changes). Your work will include complex workflow design, provisioning rules, custom connectors and integrations, and continuous improvement of IAM processes.

Your Responsibilities

• Own the functional and technical design of SailPoint ISC configurations, workflows and integrations.
• Lead the migration from legacy IAM components to SailPoint ISC, including analysis, cut‑over planning and decommissioning activities.
• Design and implement automated provisioning/de‑provisioning, certification campaigns and access governance processes (joiner/mover/leaver, role changes, company changes).
• Design and implement complex workflows, provisioning rules, and policies; develop and maintain custom connectors and integrations.
• Collaborate with engineers and vendors to implement, test and optimise SailPoint‑based solutions within a cloud environment, including enhancement scripts, rules and provisioning logic.
• Support incident and problem management for IAM topics, including root‑cause analysis and remediation.
• Work closely with security, workplace and application teams to define integration patterns and ensure secure end‑to‑end data flows.
• Contribute to and review technical documentation, architecture decisions and design guidelines for IAM capabilities.
• Act as a trusted counterpart to stakeholders (solution owners, platform leads, external partners), explaining options, risks and trade‑offs.
• Provide guidance and knowledge transfer to team members and partners on SailPoint ISC capabilities and best practices.
• Continuously identify improvement opportunities to reduce manual work, technical debt and operational risk within the IAM landscape.

Qualifications

• 5+ years of experience in designing, implementing or operating enterprise‑scale identity, security or platform services in complex IT environments.
• Proven hands‑on experience with SailPoint Identity Security Cloud (ISC) or a comparable cloud‑based IGA platform (engineering/configuration, not just operations).
• Strong understanding of identity lifecycle processes, role/authorization models and IAM integration patterns with AD/Entra and HR systems.
• Solid technical skills in cloud architectures, REST APIs, events/messaging and integrating SaaS platforms into enterprise environments.
• Deep understanding of directory services (Active Directory, Entra ID), REST APIs and authentication protocols (SAML, OAuth, OpenID Connect).
• Proven expertise in access governance design (RBAC/ABAC), entitlement modeling and automation (GitLab CI/CD).
• Ability to translate business and security requirements into feasible, scalable IAM designs and configurations.
• Strong understanding of identity governance, compliance and audit frameworks.
• Experience as a senior individual contributor: self‑driven, accountable, able to structure work and drive topics end‑to‑end.
• Excellent stakeholder management and communication skills, including working with solution owners, vendors and distributed teams.
• Experience in incident/problem management and familiarity with secure coding/configuration and security‑by‑design principles.
• Comfortable working in agile delivery models.
• Strong analytical and conceptual thinking, able to navigate complex legacy landscapes and design pragmatic migration paths.
• Fluency in English (spoken and written).
• Preferred certifications: SailPoint Certified Identity Security Engineer or equivalent.

Education

Graduation or Post‑Graduation