IAM Engineer (SailPoint) | Consultant to Manager

Private Advertiser; Metro Manila; On-site; PHP 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Day 1 HMO

Two Dependents

Communication Allowance

Rice Allowance

Clothing Allowance

Holiday Gift

Group Insurance

Life Insurance

Optical Allowance

Medicine Allowance

Dental Allowance

Bereavement Assistance

Job summary

Private Advertiser is seeking a senior IAM Engineer to design and own enterprise identity governance and administration. You will lead SailPoint deployments, implement RBAC/ABAC, and integrate with cloud platforms, HR systems, and directories.

The role requires hands-on provisioning, governance, and stakeholder advisory across hybrid environments. Strong experience with SailPoint IdentityIQ/Identity Security Cloud, and cloud IAM programs (Azure, AWS, GCP) is essential.

Qualifications

• 6-10+ years in IAM, IA/M security engineering or security architecture.
• Design and implement SailPoint IdentityIQ and/or Identity Security Cloud solutions.
• Experience with identity lifecycle, provisioning, access governance and SoD.
• Hands-on IAM integrations with directories, ERP, cloud platforms, HR systems.
• Experience across Azure, AWS, and GCP IAM programs.
• Ability to advise senior stakeholders on IAM risks and governance.
• SailPoint certifications are strongly preferred: IdentityIQ Engineer/Architect, Identity Security Cloud Professional/Engineer.

Responsibilities

• Design, implement, and own IGA architecture and operations.
• Lead deployment and configuration of SailPoint capabilities and SoD controls.
• Engineer automated identity lifecycle and provisioning workflows.
• Integrate SailPoint with enterprise apps, directories, cloud, and HR systems.
• Develop RBAC and ABAC models to support least privilege and compliance.
• Drive access certification programs and governance reporting.
• Collaborate with cloud and platform teams for Entra ID/Azure/AWS/GCP integration.
• Troubleshoot complex IAM integrations and identity data sources.

Skills

IAM design

Identity governance

Security engineering

Stakeholder advisory

SoD controls

RBAC/ABAC

Education

Bachelor's or Master's in CS/Engineering

Tools

SailPoint IdentityIQ

Identity Security Cloud

Azure AD/Microsoft Entra ID

AWS/Azure/GCP

PowerShell

Python

REST APIs

Job description

Position: IAM Engineer

Job Level: Senior Consultant to Manager

Candidates must be willing to relocate to Bulgaria and flexible to work on Midshift and/or Nightshift schedules.

Job Description

• Design, implement, and own enterprise Identity Governance and Administration (IGA) architecture and operations centered on SailPoint IdentityIQ and/or Identity Security Cloud, delivering scalable identity lifecycle management and access governance capabilities across cloud, hybrid, and on-premises environments.

• Lead hands-on deployment and configuration of SailPoint capabilities, including Joiner-Mover-Leaver processes, access requests, approvals, certifications, role management, policy controls, and segregation of duties (SoD).

• Engineer automated identity lifecycle and provisioning workflows using PowerShell, Python, REST APIs, and connectors, developing reusable integrations that reduce manual effort and improve governance consistency.

• Integrate SailPoint with enterprise applications, directories, cloud platforms, HR systems, and identity providers, ensuring seamless management of identities and access across business-critical environments.

• Design and implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models that support least privilege, compliance requirements, and operational scalability.

• Drive access certification and governance programs by implementing periodic access reviews, policy enforcement, SoD controls, and audit-ready reporting capabilities.

• Partner with cloud and platform engineering teams to extend identity governance capabilities into Microsoft Entra ID (Azure AD), Azure, AWS, GCP, SaaS applications, and DevOps platforms, ensuring consistent identity controls across all environments.

• Troubleshoot complex integration and operational issues involving connectors, directories, cloud services, applications, authentication systems, and identity data sources.

Qualifications

• Bachelor's or master’s degree in computer science, Cybersecurity, Information Systems, Engineering, or a related technical field.

• 6-10+ years of experience in Identity and Access Management, Identity Governance, Security Engineering, or Security Architecture roles.

• Proven experience designing and implementing SailPoint IdentityIQ and/or Identity Security Cloudsolutions in enterprise or highly regulated environments.

• Strong understanding of identity lifecycle management, provisioning, access governance, role modeling, SoD controls, and compliance frameworks.

• Hands-on experience integrating IAM solutions with directories, ERP systems, cloud platforms, databases, enterprise applications, and HR systems.

• Experience supporting IAM programs across cloud environments including Azure, AWS, and GCP.

• Demonstrated ability to advise senior stakeholders on IAM risks, governance strategies, architectural decisions, and remediation approaches.

• SailPoint certifications strongly preferred:

  • SailPoint IdentityIQ Engineer

  • SailPoint IdentityIQ Architect

  • SailPoint Identity Security Cloud Professional

  • SailPoint Identity Security Cloud Engineer

Company Benefits

• Day 1 HMO with 2 Free Dependents

• Communication Allowance

• Rice Allowance

• Clothing Allowance

• Christmas/Holiday Gift

• Group Personal Accident Insurance

• Life Insurance

• Optical/Medicine/Dental Allowance

• Bereavement Assistance