Senior Sailpoint Security Operations Analyst - Identity & Access Management

Procter & Gamble; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Procter & Gamble seeks an experienced Identity & Privileged Access Operations Engineer to join the IAM organization in Cincinnati. The role focuses on SailPoint governance, PAM operations, and executive‑level support, delivering advanced L3 incident handling and cross‑functional collaboration.

The candidate will drive identity lifecycle, access provisioning, reviews, roles, and data quality, while partnering with IAM Engineering, ServiceNow, and business users to mature the IAM Operations model.

Qualifications

• Bachelor's degree in Information Systems, IT, CS, or STEM field with 7+ years of experience
• Strong experience in enterprise IT/ IAM operations and cybersecurity support
• Hands-on experience with SailPoint IdentityIQ and related IAM processes
• Ability to read and troubleshoot Java/BeanShell scripts; development experience helpful
• Solid understanding of IAM concepts: identity lifecycle, provisioning, entitlements, roles and workflows
• Experience with ITIL-based incident, problem, change and escalation management
• Experience using ServiceNow or similar ticketing workflow platforms
• Ability to coordinate across Service Desk, Operations, Engineering and business stakeholders
• Willingness to work a hybrid schedule in Cincinnati, OH area

Responsibilities

• Provide advanced Level 3 operational support for SailPoint services and manage identity governance issues
• Investigate, troubleshoot, and resolve access provisioning, lifecycle, certification and data-quality issues
• Support PAM operational processes, vaulting, ownership, and governance activities
• Deliver executive-care L3 support with high-touch resolution and timely communication
• Lead or support incident/problem/change and service management through ServiceNow
• Develop and maintain SOPs, runbooks, and automation ideas for IAM operations

Skills

SailPoint

Privileged Access

ServiceNow

Java/BeanShell

IAM concepts

ITIL processes

Education

Bachelor's Degree in IT/IS/CS

Tools

SailPoint IdentityIQ

SailPoint Identity Security Cloud

itAccess

ServiceNow

Job description

Job Location CINCINNATI GENERAL OFFICES

Job Description

We are seeking an experienced Identity & Privileged Access Operations Engineer to join the Information Security Identity and Access Management organization. This role will provide advanced operational support for SailPoint Identity Governance Administration services, while also supporting Privileged Access Management processes and platforms as part of the evolving IAM Operations model. The role is intended for a hands‑on operations professional who combines strong troubleshooting discipline, customer support mindset, ITIL-based incident and problem management, and practical IAM platform knowledge. SailPoint experience remains a core requirement, while PAM exposure and executive-care support are important extensions of the role. The successful candidate will work closely with IAM Engineering, PAM platform owners, service management, ServiceNow / Help Desk teams, security operations partners, executive administrative support teams, and business users to resolve issues, improve service quality, strengthen operational controls, and mature a horizontal IAM Operations model. A key expectation is to support the "onboard once, govern everywhere" direction: using consistent identity data, ownership, entitlement, and privileged‑access signals across Sailpoint and PAM so customers are not asked to repeat separate onboarding and data‑collection activities for every control plane.

SailPoint / Identity Governance Operations

Provide advanced Level 3 operational support for SailPoint services. Investigate, troubleshoot, and resolve access provisioning, identity lifecycle, certification, entitlement, role, workflow, policy, and data‑quality related issues. Support complex incidents and problem records related to SailPoint IdentityIQ and associated IAM processes. Provide technical and operational guidance to Tier 2 Operations Analysts during incident management, problem management, change management, and operational escalations. Support access reviews, application onboarding / offboarding, identity lifecycle events, access provisioning, role management, rules, reports, password management, and operational tasks. Scripting, BeanShell, and Java understanding are preferred for troubleshooting and configuration analysis, but this is not intended to be a full developer role. Partner with IAM Engineering on platform defects, recurring issues, configuration issues, integration gaps, foundational connector concerns, and root‑cause elimination.

Privileged Access Management Operations

Support PAM operational processes and platforms, including privileged access issue resolution, account onboarding challenges, vaulting / privileged account governance, and control monitoring. Assist with privileged account lifecycle, privileged account ownership, compliance controls, audit readiness, risk signals, and service health activities. Partner with PAM platform owners and engineering teams to elevate and resolve complex privileged access issues. Connect Sailpoint and PAM support work by helping ensure privileged identities, accounts, entitlements, owners, applications, and governance attributes are consistently represented. Contribute to operational improvements that strengthen privileged access protection, reduce duplicate onboarding effort, and avoid parallel data‑collection processes for customers.

Executive Care and Customer‑Facing Support

Provide direct L3 support for executive administrative teams when identity, access, or privileged access issues require high‑touch resolution. Coordinate timely updates, escalation paths, and service restoration steps for executive‑care scenarios while maintaining appropriate operational controls. Use executive‑care insights to identify recurring pain points, process gaps, documentation needs, and automation opportunities.

Unified Onboarding and Governance Support

Work with application owners, service managers, onboarding teams, data‑quality resources, and platform owners to reduce separate onboarding asks and duplicate data grabs from customers. Identify where PAM and Sailpoint overlap from a support perspective, including data model alignment, ownership validation, entitlement mapping, privileged flagging, and foundational connector or integration needs. Use support patterns and ticket data to feed continuous improvement across Sailpoint and PAM operational processes.

Incident, Problem, Change, and Service Management

Manage incidents, service requests, problem records, and escalations through ServiceNow or similar workflow platforms. Lead or support root cause analysis for recurring or high‑impact IAM / PAM issues. Participate in operational readiness, testing, validation, and change execution for IAM‑related platform changes.

Operational Excellence and Continuous Improvement

Maintain and improve operational documentation, SOPs, runbooks, knowledge articles, and support procedures. Identify recurring issue patterns and drive corrective actions to reduce ticket volume and improve service quality. Support operational metrics, KPIs, service reviews, health checks, and performance management. Contribute to automation, self‑healing, workflow improvements, and process simplification. Help mature IAM Operations from reactive ticket resolution toward proactive service ownership and demand reduction.

Job Qualifications Required

• Bachelor's Degree in Information Systems, Information Technology (IT), Computer Science, Software Engineering, other STEM field or 7+ years relevant years of experience/education.
• Strong experience in enterprise IT operations, IAM operations, cybersecurity support, or similar technical support environment.
• Hands‑on experience supporting SailPoint IdentityIQ, SailPoint Identity Security Cloud, itAccess, or comparable IAM /Sailpoint platforms.
• Ability to read, understand, or troubleshoot Java / BeanShell scripts and SailPoint‑related configuration; hands‑on development is helpful but not required for this role.
• Strong understanding of IAM concepts, including identity lifecycle, access provisioning, access reviews, entitlements, roles, workflows, policy violations, and ownership models.
• Experience with ITIL‑based incident, problem, change, and escalation management.
• Experience using ServiceNow or similar ticketing / workflow management platforms.
• Strong troubleshooting, analytical, and problem‑solving skills.
• Ability to coordinate effectively across Service Desk, Operations, Engineering, service managers, vendors, and business stakeholders.
• Strong customer service orientation and ability to communicate clearly with technical and non‑technical audiences.
• Ability to work hybrid schedule in Cincinnati, OH based office.

Preferred

• Experience with Privileged Access Management platforms such as CyberArk, Delinea / Centrify, BeyondTrust, or similar.
• Knowledge of privileged account onboarding, vaulting, privilege elevation, session governance, privileged account ownership, and control monitoring.
• Experience with SailPoint IdentityIQ areas such as application onboarding / offboarding, certifications, tasks, reports, lifecycle events, workflows, rules, roles, access provisioning, and password management.
• Familiarity with connectors such as SAP, SAP Java, Oracle, Active Directory, Enterprise Directory, or similar.
• Familiarity with identity data models, entitlement mapping, application ownership, privileged account discovery, and governance metadata.
• Familiarity with cloud environments such as Azure, AWS, or GCP.
• Experience with server, database, Linux, Windows Server, or middleware operations.
• Scripting, automation, dashboarding, or data analysis capability.
• ITIL Foundation, SailPoint certification, PAM certification, cloud certification, or CISSP / cybersecurity certification preferred.

Compensation for roles at P&G varies depending on a wide array of non‑discriminatory factors including but not limited to the specific office location, role, degree/credentials, relevant skill set, and level of relevant experience. At P&G compensation decisions are dependent on the facts and circumstances of each case. Total rewards at P&G include salary + bonus (if applicable) + benefits.

Job Schedule Full time

Job Number R000155686

Job Segmentation Experienced Professionals

P&G was founded over 180 years ago as a simple soap and candle company. Today, we’re the world’s largest consumer goods company and home to iconic, trusted brands that make life a little bit easier in small but meaningful ways. We’ve spanned three centuries thanks to three simple ideas: leadership, innovation and citizenship. The insight, innovation and passion of talented teams has helped us grow into a global company that is governed responsibly and ethically, that is open and transparent, and that supports good causes and protects the environment. This is a place where you can be proud to work and do something that matters.

We are committed to providing equal opportunities in employment. We value diversity and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Immigration Sponsorship is not available for this role.

P&G participates in E-Verify. Qualified individuals will not be disadvantaged based on being unemployed. P&G is dedicated to meeting the needs of applicants requesting an accommodation/adjustment due to a disability in order to complete the online application process. If you have a disability that affects your ability to complete our online application process, please visit our Disability Accommodation Page.