SailPoint IdentityIQ Engineer

Stafide; Amsterdam; On-site; EUR 90,000 - 140,000; Full time

Job summary

Stafide is seeking a Senior SailPoint IdentityIQ Engineer to design, develop, and maintain IAM workflows and forms. You will drive end-to-end application onboarding into IAM solutions and implement robust RBAC/ABAC, with PBAC preferred.

You will manage identity lifecycle processes and build enterprise integrations, while supporting CI/CD and DevOps practices. You will collaborate with business stakeholders and architects to translate requirements into secure IAM solutions and identify automation

Qualifications

• 8–10 years of total experience with at least 7 years in IAM.
• Hands-on development with SailPoint IdentityIQ and IAM governance.
• Experience with RBAC, ABAC, lifecycle management, and entitlements.
• Strong CI/CD and DevOps automation experience.
• Knowledge of policy engines (OPA/OPAL) is preferred.

Responsibilities

• Design, implement, and maintain SailPoint IdentityIQ workflows, rules, policies, and forms.
• Onboard applications end-to-end into IAM solutions.
• Implement RBAC, ABAC, and preferably PBAC.
• Manage Joiner/Mover/Leaver processes, certifications, and entitlements.
• Develop integrations via LDAP, REST/SOAP, SCIM, databases, and apps.
• Support CI/CD automation and workflow standardization.
• Collaborate with stakeholders and architects to gather requirements.
• Identify opportunities to improve security and onboarding automation.

Skills

Identity and Access Management (IAM)

SailPoint IdentityIQ

RBAC

ABAC

CI/CD

DevOps

PBAC (Policy-Based Access Control)

OPA / policy engines

Tools

Open Policy Agent (OPA)

OPAL

Job description

As a SailPoint IdentityIQ Engineer, you will:

• Design, develop, and maintain SailPoint IdentityIQ workflows, rules, policies, and forms.
• Manage end-to-end application onboarding into Identity and Access Management (IAM) solutions.
• Implement Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and preferably Policy-Based Access Control (PBAC).
• Manage identity lifecycle processes, including Joiner, Mover, Leaver (JML), access certifications, and entitlement management.
• Develop application integrations using LDAP, REST/SOAP APIs, SCIM, databases, and enterprise applications.
• Support CI/CD automation, DevOps practices, and workflow standardization.
• Collaborate with business stakeholders, application owners, and architects to gather requirements and implement secure IAM solutions.
• Identify opportunities to improve security processes, automate onboarding, and troubleshoot IAM issues.

What You Bring to the Table:

• 8–10 years of overall experience, including a minimum of 7 years in Identity and Access Management (IAM).
• Strong hands‑on development experience in SailPoint IdentityIQ and Identity Governance and Administration (IGA).
• Experience with RBAC, ABAC, identity lifecycle management, access certification, and entitlement management.
• Strong experience in CI/CD and CT automation.
• Knowledge of OPA (Open Policy Agent), OPAL, or similar policy‑engine technologies is highly preferred.

You should possess the ability to:

• Translate business requirements into effective IAM solutions.
• Manage application onboarding from initial requirements through implementation and acceptance.
• Work collaboratively in Agile/SAFe and DevOps environments.
• Communicate effectively with stakeholders and identify improvements in security, automation, and onboarding processes.

What We Bring to the Table:

• Opportunities to work on enterprise IAM and cybersecurity solutions.
• Exposure to SailPoint development, security automation, and application integrations.
• Collaboration with security, architecture, and platform teams.