Senior IAM Engineer (SailPoint/Saviynt) – Hybrid, Growth

Ahold Delhaize; Zaandam; On-site; EUR 68,000 - 83,000; Full time

Benefits offered by this job

Gross annual salary up to 75K (base)

Bonus

Pension plan

25 vacation days + 19.5 ADV days

Travel expenses or NS travel card

Laptop and smartphone

Job summary

Ahold Delhaize is seeking an IGA Engineer to join the IGA Platform team, responsible for Identity Management, RBAC, Access Certification, and related capabilities across brands and countries.

You will work with IAM technologies like SailPoint IIQ, Saviynt, and IBM ISIM, leading onboarding, provisioning, RBAC governance, and integrations with AD/Azure AD and HR systems. The role includes on-call incident support and mentoring junior engineers.

Qualifications

• Understanding IAM concepts and principles including Identity Lifecycle Mgmt, RBAC, Application Onboarding
• Have been part of teams that executed greenfield IGA Implementation projects
• Familiarity with IAM products and methodologies such as SailPoint, IBM ISIM or Saviynt
• Ability to identify and solve solutions to complex problems to solve business needs
• Ability to translate requirements into solutions
• Great collaboration skills
• Excellent written and oral communication skills
• Experience with working and managing a team of Service Integrators (SIs)

Responsibilities

• Lead the architecture, configuration, and deployment of IGA solutions (e.g., SailPoint IIQ, Saviynt, IBM ISIM)
• Manage the full user identity lifecycle — onboarding, provisioning, de-provisioning, access certification, and role management
• Integrate the IGA platforms with directories (AD/Azure AD), HR systems (SuccessFactors) and cloud/on-prem applications
• Define and implement governance policies for RBAC, least privilege, and segregation of duties (SoD)
• Develop connectors, workflows, and custom integrations to support business and compliance needs
• Collaborate with audit, risk, and compliance teams to support regulatory frameworks (SOX, GDPR, ISO 27001, etc.)
• Troubleshoot and resolve IGA issues; perform root cause analysis and implement permanent fixes
• Lead and mentor junior IAM engineers and analysts
• Drive continuous improvement in IAM/IGA processes, automation, and security posture
• Serve as the primary point of contact for incident troubleshooting during on-call periods, adhering to the on-call rotation schedule (Acting as Ahold Delhaize MoD - responsible 24/7 for driving incident resolution on a rotational basis)

Skills

IAM concepts

RBAC

Identity Lifecycle Mgmt

Greenfield IGA

SailPoint IIQ

Saviynt

IBM ISIM

AD/Azure AD integration

On-call incident response

Team mentorship

Tools

SailPoint IIQ

Saviynt

IBM ISIM

Active Directory

Azure AD

SuccessFactors

Job description

Ahold Delhaize is seeking an IGA Engineer to join the IGA Platform team, responsible for Identity Management, RBAC, Access Certification, and related capabilities across brands and countries.

You will work with IAM technologies like SailPoint IIQ, Saviynt, and IBM ISIM, leading onboarding, provisioning, RBAC governance, and integrations with AD/Azure AD and HR systems. The role includes on-call incident support and mentoring junior engineers.