Platform Engineer, IAM Identity Gov. & Admin

Mondelez International; Polska; On-site; PLN 120,000 - 180,000; Full time

Job summary

Mondelēz International is seeking an experienced information security and compliance specialist to join the information security team in leading IAM initiatives. You will design, implement and operate SailPoint IdentityIQ solutions, manage access governance, and ensure SOX, GDPR, HIPAA, PCI-DSS, and ISO 27001 alignment.

You will collaborate with application owners, IT security and HR to drive adoption, run access certification campaigns, and maintain audit-ready evidence.

Qualifications

• 10+ years in Identity & Access Management, including 7+ years hands-on IGA platform engineering.
• Expert-level SailPoint IdentityIQ - workflows, connectors, lifecycle events, certifications and role modelling.
• Strong Java and BeanShell scripting, with SQL, XML, JSON, REST APIs and web services.

Responsibilities

• Design, develop and deploy SailPoint IdentityIQ solutions and RBAC/ABAC access models.
• Lead IIQ platform operations: health, provisioning, upgrades and change control.
• Run access certification campaigns and SoD reviews with risk-based strategies.
• Governing privileged access via PAM integration and Just-In-Time provisioning.

Skills

Identity & Access Management

SailPoint IdentityIQ

Java / BeanShell scripting

REST / JSON / XML

LDAP / AD / Azure AD

Zero Trust Architecture

Compliance governance

Education

Bachelor's degree in CS or Information Security

SailPoint certifications

CISSP / CISM / CISA (preferred)

Tools

ServiceNow

Jira

SIEM/SOAR

Git / Jenkins

Ansible

Job description

Job DescriptionAre You Ready to Make It Happen at Mondelēz International?Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.You work with the information security team as a competent and experienced information security and compliance specialist.How you will contributeYou will assess information security risks in line with internal policy and external best practices, and support security of information and IT assets by testing security systems and applying security standards, policies, and procedures. Under the guidance of global information security lead, you will implement cyber security technology and provide day-to-day business support. If relevant to your role, you will manage third-party providers to ensure that any internal or third-party adhere to standards. You will also provide information security training to appropriate teams.What you will bringA desire to drive your future and accelerate your career. You will bring experience and knowledge in:Information security, compliance and risk managementSecurity solutions and their applicability to Mondelēz InternationalSecurity strategies, awareness campaigns, policies/standards and governanceCommunicating effectively with technical specialists, leaders and peersAnalytical and problem-solving abilitiesBeing a team player by supporting and leading to achieve common goalsIn this Role you will be;- Designing, developing and deploying SailPoint IdentityIQ solutions - workflows, rules, custom connectors (JDBC, SCIM, REST, LDAP) and RBAC/ABAC/PBAC access models- Acting as the primary operational SME for the IIQ platform across all environments: platform health, aggregation and provisioning issues, root cause analysis, upgrades and change control under ITIL/ITSM- Running access certification campaigns - manager, entitlement owner, micro-certification and SoD reviews - using risk-based strategies and AI-driven recommendations- Enhancing automated Joiner, Mover and Leaver workflows, from birthright provisioning through to timely de-provisioning and orphan account cleanup- Leading role mining, role engineering and entitlement rationalisation to keep the access model clean and access requests simple- Governing privileged access through PAM integration, SoD enforcement and Just-In-Time provisioning- Keeping IGA processes aligned to SOX, GDPR, HIPAA, PCI-DSS, NIST 800-53 and ISO 27001, with audit-ready reporting and evidence- Building integrations that scale - ServiceNow/Jira for access request fulfilment, SIEM/SOAR for ITDR, and multi-cloud IAM (AWS, Azure, GCP)- Partnering with application owners, HR, IT Security and the business to drive adoption, and presenting the KPIs that show platform maturityWHAT YOU WILL BRINGA desire to drive your future and accelerate your career, along with experience and knowledge in:10+ years in Identity & Access Management, including 7+ years hands-on IGA platform engineeringExpert-level SailPoint IdentityIQ - workflows, rules, connectors, lifecycle events, certifications and role modellingStrong Java and BeanShell scripting, with SQL, XML, JSON, REST APIs and web servicesLDAP / Active Directory, Azure AD / Entra ID and enterprise directory servicesSCIM, SAML 2.0, OAuth 2.0, OpenID Connect and CI/CD pipelines (Git, Jenkins, Ansible)NIST CSF 2.0, NIST 800-53, ISO 27001/27002, Zero Trust Architecture and COBIT 2019A Bachelor's degree in Computer Science, Information Security or a related field, or equivalent experienceSailPoint certifications, CISSP, CISM or CISA (preferred)The responsibilities of this position are performed within the framework of a regional business model that is defined and managed by Mondelēz Europe GmbH, Switzerland.No Relocation support availableBusiness Unit SummaryMondelēz International, Inc. empowers people to snack right in over 150 countries around the world. We are leading the future of snacking with mouth-watering iconic brands such as Oreo, belVita, LU and Ritz biscuits; Cadbury Dairy Milk, Green & Blacks, Milka and Toblerone chocolate; Philadelphia and Dairylea cheese; and Maynards Bassetts, Trebor and Trident gums. Our more than 80,000 colleagues around the world are key to the success of our business. Great people and great brands. That’s who we are. Join us on our journey to continue leading the future of snacking around the world by offering the right snack, for the right moment, made the right way.Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.Job TypeRegularInformation SecurityTechnology & Digital