About the role
As a Senior IAM Engineer, you will design, implement, and own enterprise Identity Governance and Administration architecture and operations centred on SailPoint IdentityIQ and/or Identity Security Cloud. You will deliver scalable identity lifecycle management and access governance capabilities across cloud, hybrid, and on-premises environments while helping strengthen security, compliance, and operational efficiency.
Key responsibilities
- Lead hands-on deployment and configuration of SailPoint capabilities, including Joiner-Mover-Leaver processes, access requests, approvals, certifications, role management, policy controls, and segregation of duties controls.
- Engineer automated identity lifecycle and provisioning workflows using PowerShell, Python, REST APIs, and connectors.
- Develop reusable integrations that reduce manual effort and improve governance consistency.
- Integrate SailPoint with enterprise applications, directories, cloud platforms, HR systems, identity providers, and business-critical environments.
- Design and implement Role-Based Access Control and Attribute-Based Access Control models that support least privilege, compliance requirements, and operational scalability.
- Drive access certification and governance programmes through periodic access reviews, policy enforcement, segregation of duties controls, and audit-ready reporting.
- Partner with cloud and platform engineering teams to extend identity governance capabilities into Microsoft Entra ID, Azure, AWS, GCP, SaaS applications, and DevOps platforms.
- Troubleshoot complex integration and operational issues involving connectors, directories, cloud services, applications, authentication systems, and identity data sources.
- Advise senior stakeholders on IAM risks, governance strategies, architectural decisions, and remediation approaches.
What we're looking for
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related technical field.
- 6–10+ years of experience in Identity and Access Management, Identity Governance, Security Engineering, or Security Architecture roles.
- Proven experience designing and implementing SailPoint IdentityIQ and/or Identity Security Cloud solutions in enterprise or highly regulated environments.
- Strong understanding of identity lifecycle management, provisioning, access governance, role modelling, segregation of duties controls, and compliance frameworks.
- Hands‑on experience integrating IAM solutions with directories, ERP systems, cloud platforms, databases, enterprise applications, and HR systems.
- Experience supporting IAM programmes across Azure, AWS, and GCP environments.
- Strong stakeholder communication, problem‑solving, and technical architecture skills.
- SailPoint certifications are strongly preferred, including SailPoint IdentityIQ Engineer, SailPoint IdentityIQ Architect, SailPoint Identity Security Cloud Professional, or SailPoint Identity Security Cloud Engineer.