Identity & Access Management SailPoint Engineering

Santander; Ciudad de México; Presencial; MXN 1.200.000 - 1.800.000; Jornada completa

Descripción de la vacante

Santander is seeking an Identity & Access Management SailPoint Engineering leader in Mexico to define and execute a scalable IAM strategy. The role drives governance for RBAC/ABAC, lifecycle management, and certification programs, while modernizing infrastructure and overseeing SailPoint/IAM integrations.

The candidate will lead architecture for SailPoint IdentityIQ and FAM, oversee onboarding of apps across on-prem, SaaS, and cloud environments, and push automation through JML and DevSecOps

Responsabilidades

• Define and execute the IAM/IGA strategy aligned with cybersecurity and digital transformation objectives.
• Establish governance for identity lifecycle, role-based and attribute-based access, and certification campaigns.
• Develop IAM roadmaps, investment plans, and KPIs.
• Drive modernization, including migration to SailPoint IdentityNow and cloud-first identity architecture.
• Provide architectural oversight for SailPoint (IdentityIQ) and FAM and ensure performance and availability.
• Lead onboarding of enterprise apps (on-prem, SaaS, cloud, legacy).
• Manage roles, access policies, and entitlement governance; oversee connectors and custom integrations.
• Implement automated JML processes and integrate HR, AD/LDAP, cloud platforms, and critical apps.
• Reduce manual provisioning via orchestration; establish SLAs for provisioning/deprovisioning.
• Ensure alignment with SOX, GLBA, PCI-DSS, ISO 27001; lead access certification and remediation.
• Mentor IAM engineers/architects; implement DevSecOps for SailPoint deployments and change mgmt.
• Establish monitoring, incident response, root-cause analysis; manage vendor relationships.
• Engage stakeholders; present IAM metrics and risk posture to senior leadership.

Conocimientos

IAM leadership

SailPoint

RBAC/ABAC

SoD controls

JML automation

DevSecOps

Herramientas

SailPoint IdentityIQ

SailPoint IdentityNow

FAM

Beanshell/Java

Workday

AD/AzureAD/LDAP

AWS/Azure/GCP

Descripción del empleo

Identity & Access Management SailPoint Engineering

Country: Mexico

Key Responsibilities

1 . Strategic Leadership & Governance

• Define and execute the IAM/IGA strategy aligned with enterprise cybersecurity and digital transformation objectives.
• Establish governance frameworks for identity lifecycle management, RBAC/ABAC, SoD controls, and certification campaigns.
• Develop and maintain IAM roadmaps, investment plans, and KPIs.
• Drive modernization initiatives including migration to SailPoint IdentityNow (if applicable) and cloud-first identity architecture.

2 . SailPoint Platform Ownership

• Provide architectural oversight and engineering leadership for SailPoint (IdentityIQ) and File Access Manager (FAM).
• Ensure platform scalability, resilience, performance tuning, and high availability.
• Lead onboarding of enterprise applications (on-prem, SaaS, cloud, legacy systems).
• Oversee connector configurations, rule development (Beanshell/Java), workflows, and custom integrations.
• Manage role modeling, access policies, and entitlement governance frameworks.

3. Identity Lifecycle & Automation

• Implement automated Joiner-Mover-Leaver (JML) processes.
• Integrate HR systems (e.g., Workday), Active Directory, Azure AD, LDAP, cloud platforms (AWS/Azure/GCP), and business-critical applications.
• Reduce manual provisioning through orchestration and API-driven automation.
• Establish measurable SLAs for provisioning and de-provisioning.

4. Compliance, Risk & Audit

• Ensure alignment with regulatory and compliance frameworks (e.g., SOX, GLBA, PCI-DSS, FFIEC, ISO 27001).
• Lead access certification campaigns and remediation processes.
• Partner with Internal Audit and Risk teams to address findings and improve control maturity.
• Maintain documentation, control evidence, and audit-ready posture.

5. Engineering & Operations Management

• Lead, mentor, and scale a team of IAM engineers and architects.
• Implement DevSecOps practices for SailPoint code deployment and change management.
• Establish operational monitoring, incident response processes, and root cause analysis for IAM services.
• Manage vendor relationships and third-party IAM service providers.

6. Stakeholder Engagement

• Partner with Application Owners and Business Units for secure onboarding and access governance.
• Present IAM metrics and risk posture to senior leadership and governance committees.
• Drive cross-functional alignment on identity standards and best practices.