IAM Engineer – SailPoint IdentityIQ 10928982

ITProposal; Eindhoven; On-site; EUR 90,000 - 130,000; Full time

Job summary

ITProposal is seeking a senior IAM Engineer in Eindhoven, NL, for a 6-month contract. The role focuses on SailPoint IdentityIQ development, end-to-end onboarding, and policy enforcement within an enterprise IAM program.

The successful candidate will drive RBAC/ABAC/PBAC adoption, collaborate with architecture, DevOps, and external vendors, and participate in SAFe/Agile ceremonies in a hybrid Eindhoven setting.

Qualifications

• 7+ years experience in Identity Access Management (IAM).
• Hands-on development with SailPoint IdentityIQ.
• IGA knowledge, onboarding patterns, and IAM best practices.
• Experience with policy engines (OPA/OPAL) or similar.
• RBAC, ABAC, PBAC frameworks experience.
• Designing complex workflows, rules, policies, and forms.
• CI/CD automation and Agile/SAFe environments.
• Strong stakeholder communication and consultancy skills.
• Security technologies and entitlement management knowledge.

Responsibilities

• Validate onboarding of business applications into the IAM solution.
• Align with architecture on deployments and integration design.
• Configure onboarding using standard IAM functionality and strategy.
• Own end-to-end onboarding process from intake to acceptance.
• Drive standardization and automation with CI/CD pipelines.
• Participate in Scrum/SAFe ceremonies in an Agile DevOps setting.
• Design and validate workflows, rules, policies, and forms in SailPoint IdentityIQ.
• Implement and validate RBAC, ABAC, and PBAC access control models.
• Support Certification processes and entitlement management.
• Validate integrations with LDAP, REST/SOAP, SCIM, and SaaS apps.

Skills

SailPoint IdentityIQ

Identity Governance & Administration

RBAC/ABAC/PBAC

OPAL/Open Policy Agent

CI/CD automation

DevOps practices

SAFe/Agile

Stakeholder communication

Onboarding workflows design

Security policy frameworks

Tools

LDAP

REST/SOAP

SCIM

Okta

Workday

SAP Suite

Job description

IAM Engineer - SailPoint IdentityIQ (RBAC / ABAC / PBAC / OPA)

Eindhoven, NetherlandsStart Date:ASAPContract Duration: 6 MonthsRequirement ID: 10928982Status: Open

About the Role

We are looking for a highly skilled IAM Engineer with deep expertise in Identity Governance & Administration (IGA) and hands-on development experience in SailPoint IdentityIQ. This role is ideal for a senior engineer who excels in stakeholder interaction, understands complex IAM requirements, and can deliver secure, scalable onboarding solutions across a large enterprise landscape.

You will be responsible for end-to-end application onboarding, workflow development, policy implementation, and integration validation - ensuring compliance with security frameworks, RBAC/ABAC/PBAC models, and Identity Lifecycle Management processes.

Key Responsibilities

• Validate and implement functional and non-functional requirements for onboarding business applications into the IAM solution.
• Align with architecture teams on OPAL managed-service deployment, integration design, and target solution implementation.
• Configure technical application onboarding using standard IAM functionality, IAM architectural principles, and company IAM strategy.
• Own the end-to-end onboarding process from intake to acceptance.
• Drive standardization and automation, leveraging shared CI/CD pipelines with the SailPoint platform team.
• Actively participate in Scrum / SAFe ceremonies and collaborate within an Agile DevOps environment.
• Design and validate Workflows, Rules, Policies, and Forms within SailPoint IdentityIQ.
• Implement and validate RBAC, ABAC, and PBAC access control frameworks.
• Support Certification Processes, enforcement activities, and entitlement/authorization management.
• Validate integrations with LDAP, REST/SOAP, SCIM, databases, SaaS apps (Okta), Workday, SAP Suite, and other downstream systems.
• Perform operational support for Identity Lifecycle Management (Joiner, Mover, Leaver).
• Monitor progress, prepare timely status reports, identify risks/ dependencies, and elevate issues proactively.
• Collaborate with application owners, technical teams, integration teams, and external vendors.

Must-Have Skills & Experience

• 7+ years professional experience in Identity Access Management (IAM).
• Strong hands-on development experience with SailPoint IdentityIQ.
• Deep knowledge of IGA, onboarding patterns, and IAM best practices.
• Experience with OPA (Open Policy Agent), OPAL, or similar policy engines (highly preferred).
• Proven experience implementing RBAC, ABAC, PBAC frameworks.
• Strong experience designing complex workflows, rules, policies, and forms.
• Experience with application onboarding into SailPoint.
• Solid understanding of Identity Lifecycle Management processes.
• Experience with CI/CD automation, DevOps ways of working, and Agile/SAFe environments.
• Strong communication and consultancy skills for stakeholder interaction.
• Knowledge of security technologies, policy frameworks, and entitlement/authorization management.

Good-to-Have Skills

• Scripting/programming experience: Java, Beanshell, JavaScript
• Integration experience with:
  • LDAP
  • REST/SOAP
  • SCIM
  • Databases
  • SaaS apps (Okta)
  • Workday
  • SAP Suite
• Experience with CI/CD pipelines, Azure, Linux servers

Location

Eindhoven, Netherlands (TNDL - Eindhoven)Hybrid/Onsite depending on project needs.

Who Should Apply?

Senior IAM Engineers who:

• Have deep SailPoint IdentityIQ development experience
• Understand enterprise IAM architectures and policy engines
• Can manage complex onboarding and integration activities
• Thrive in Agile/SAFe environments
• Communicate clearly with stakeholders and technical teams
• Are available ASAP