IAM Engineer – SailPoint IdentityIQ (RBAC / ABAC / PBAC / OPA)

ITproposal B.V.; Eindhoven; Hybrid; EUR 70,000 - 95,000; Full time

Job summary

ITproposal B.V. in Eindhoven, Netherlands, seeks an IAM Engineer with deep SailPoint IdentityIQ expertise to lead end-to-end onboarding, workflow development, and policy implementation for a large enterprise.

You will collaborate with architecture teams, design RBAC/ABAC/PBAC access models, and contribute to secure CI/CD pipelines in an Agile/SAFe environment, available ASAP. Hybrid/onsite work depending on project needs.

Qualifications

• 7+ years in Identity Access Management.
• Hands-on SailPoint IdentityIQ development.
• Deep IGA knowledge and onboarding patterns.
• Experience with RBAC/ABAC/PBAC policies.
• Familiar with CI/CD in DevOps and Agile/SAFe.

Responsibilities

• Validate and implement onboarding requirements for applications into IAM.
• Design and validate Workflows, Rules, Policies, and Forms in SailPoint.
• Implement RBAC/ABAC/PBAC access control models.
• Own onboarding from intake to acceptance and automate where possible.
• Collaborate with architecture, integration teams, and vendors.

Skills

IdentityIQ development

IAM

RBAC/ABAC/PBAC

OPAL/OPA

CI/CD

Agile/SAFe

Stakeholder communication

Tools

OPAL

SailPoint

LDAP

SCIM

REST/ SOAP

Okta

Job description

Over de functie

IAM Engineer - SailPoint IdentityIQ (RBAC / ABAC / PBAC / OPA)

Eindhoven, Netherlands Start Date:ASAPContract Duration: 6 Months Requirement ID: 10928982 Status: Open

About the Role

We are looking for a highly skilled IAM Engineer with deep expertise in Identity Governance & Administration (IGA) and hands-on development experience in SailPoint IdentityIQ. This role is ideal for a senior engineer who excels in stakeholder interaction, understands complex IAM requirements, and can deliver secure, scalable onboarding solutions across a large enterprise landscape.

You will be responsible for end-to-end application onboarding, workflow development, policy implementation, and integration validation—ensuring compliance with security frameworks, RBAC/ABAC/PBAC models, and Identity Lifecycle Management processes.

Key Responsibilities

• Validate and implement functional and non-functional requirements for onboarding business applications into the IAM solution.

• Align with architecture teams on OPAL managed-service deployment, integration design, and target solution implementation.

• Configure technical application onboarding using standard IAM functionality, IAM architectural principles, and company IAM strategy.

• Own the end-to-end onboarding process from intake to acceptance.

• Drive standardization and automation, leveraging shared CI/CD pipelines with the SailPoint platform team.

• Actively participate in Scrum / SAFe ceremonies and collaborate within an Agile DevOps environment.

• Design and validate Workflows, Rules, Policies, and Forms within SailPoint IdentityIQ.

• Implement and validate RBAC, ABAC, and PBAC access control frameworks.

• Support Certification Processes, enforcement activities, and entitlement/authorization management.

• Validate integrations with LDAP, REST/SOAP, SCIM, databases, SaaS apps (Okta), Workday, SAP Suite, and other downstream systems.

• Perform operational support for Identity Lifecycle Management (Joiner, Mover, Leaver).

• Monitor progress, prepare timely status reports, identify risks/dependencies, and elevate issues proactively.

• Collaborate with application owners, technical teams, integration teams, and external vendors.

Must-Have Skills & Experience

• 7+ years professional experience in Identity Access Management (IAM).

• Strong hands-on development experience with SailPoint IdentityIQ.

• Deep knowledge of IGA, onboarding patterns, and IAM best practices.

• Experience with OPA (Open Policy Agent), OPAL, or similar policy engines (highly preferred).

• Proven experience implementing RBAC, ABAC, PBAC frameworks.

• Strong experience designing complex workflows, rules, policies, and forms.

• Experience with application onboarding into SailPoint.

• Solid understanding of Identity Lifecycle Management processes.

• Experience with CI/CD automation, DevOps ways of working, and Agile/SAFe environments.

• Strong communication and consultancy skills for stakeholder interaction.

• Knowledge of security technologies, policy frameworks, and entitlement/authorization management.

Good-to-Have Skills

• Scripting/programming experience: Java, Beanshell, JavaScript

• Integration experience with:

  • LDAP

  • REST/SOAP

  • SCIM

  • Databases

  • SaaS apps (Okta)

  • Workday

  • SAP Suite

• Experience with CI/CD pipelines, Azure, Linux servers

Location

Eindhoven, Netherlands (TNDL - Eindhoven) Hybrid/Onsite depending on project needs.

Who Should Apply?

Senior IAM Engineers who:

• Have deep SailPoint IdentityIQ development experience

• Understand enterprise IAM architectures and policy engines

• Can manage complex onboarding and integration activities

• Thrive in Agile/SAFe environments

• Communicate clearly with stakeholders and technical teams

• Are available ASAP

Wat breng jij as IAM Engineer - SailPoint IdentityIQ (RBAC / ABAC / PBAC / OPA)

Wat bieden wij vanuit ITproposal B.V.