Senior IAM / SailPoint Engineer (ID: 4004)

• Design, develop, configure, and implement Identity Governance and Administration (IGA) solutions using SailPoint IdentityIQ.
• Lead the end-to-end onboarding of business applications into the IAM platform, from initial intake and requirements validation through implementation and acceptance.
• Work closely with application stakeholders to understand functional and non-functional requirements and translate them into secure IAM solutions.
• Design and develop complex SailPoint workflows, rules, policies, forms, roles, and access controls.
• Implement and maintain Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks, with exposure to Policy-Based Access Control (PBAC) preferred.
• Work with Open Policy Agent (OPA), OPAL, or similar policy-engine technologies where applicable.
• Implement and manage identity lifecycle processes, including Joiner, Mover, and Leaver processes.
• Design and implement access certification and enforcement processes.
• Configure application integrations and standard onboarding patterns within SailPoint.
• Drive standardization and automation of application onboarding using CI/CD pipelines and available SailPoint platform capabilities.
• Work closely with architecture teams to ensure solutions align with IAM architecture principles, security standards, and organizational IAM strategy.
• Participate actively in Scrum/SAFe ceremonies and collaborate with Agile/DevOps teams.
• Identify opportunities to improve IAM processes, technologies, automation, and application onboarding patterns.
• Coordinate and validate the implementation of designed IAM capabilities according to functional and technical specifications.
• Manage technical communication with application stakeholders and support effective stakeholder engagement throughout the onboarding lifecycle., * Analyze functional and non-functional requirements and translate them into effective IAM solutions.
• Independently manage end-to-end application onboarding within SailPoint IdentityIQ.
• Design secure and scalable IAM solutions aligned with enterprise architecture and security standards.
• Develop and troubleshoot complex SailPoint workflows, rules, policies, forms, and integrations.
• Define and implement appropriate RBAC, ABAC, and entitlement-management models.
• Identify opportunities to standardize application onboarding and create reusable onboarding patterns.
• Explain standard IAM onboarding patterns and technical requirements clearly to application teams and stakeholders.
• Automate IAM processes using CI/CD pipelines and DevOps practices.
• Integrate SailPoint with diverse enterprise systems using LDAP, REST/SOAP, SCIM, databases, and SaaS platforms.
• Work effectively with architects, application owners, developers, security teams, and other stakeholders.
• Identify improvements in IAM processes, technology, automation, security, and operational support.
• Coordinate implementation activities and validate that delivered capabilities meet agreed specifications.
• Communicate complex IAM concepts clearly and provide consultancy-level guidance to application stakeholders.
• Work effectively within Scrum/SAFe and Agile delivery environments.

What we bring to the table:

• The opportunity to work on enterprise Identity Governance and Administration (IGA) initiatives.
• Exposure to complex SailPoint IdentityIQ application onboarding and IAM integrations.
• Opportunities to work with modern policy-engine technologies such as OPA and OPAL.
• Exposure to RBAC, ABAC, PBAC, entitlement management, identity lifecycle management, and access certification.
• Opportunities to contribute to IAM standardization, automation, and CI/CD enablement.
• Collaboration with architecture, security, application, and DevOps teams in an Agile/SAFe environment.

• 8-10 years of overall professional experience, with a minimum of 7 years of professional Identity & Access Management (IAM) experience.
• Strong hands-on experience with Identity Governance and Administration (IGA).
• Extensive hands-on development experience with SailPoint IdentityIQ.
• Strong experience designing and developing SailPoint Workflows, Rules, Policies, Forms, Roles, and Certifications.
• Proven experience with application onboarding into SailPoint.
• Strong experience implementing Role-Based Access Control (RBAC).
• Experience with Attribute-Based Access Control (ABAC); exposure to Policy-Based Access Control (PBAC) is preferred.
• Experience with OPA (Open Policy Agent), OPAL, or similar policy-engine technologies is highly preferred.
• Strong understanding of Identity Lifecycle Management, including Joiner, Mover, and Leaver processes.
• Experience with access certification, entitlement management, authorization management, and enforcement processes.
• Strong experience with CI/CD and automation, which is a key prerequisite for the role.
• Good understanding of DevOps practices and experience working in Agile environments.
• Experience with SAFe is preferred.
• Strong understanding of security technologies, security best practices, and security policy frameworks.
• Good scripting/programming knowledge, particularly Java, BeanShell, or JavaScript.
• Strong integration experience with technologies such as LDAP, REST/SOAP web services, SCIM, databases, and SaaS applications.
• Experience integrating SailPoint with enterprise applications and platforms such as Okta, Workday, and SAP.
• Experience working with CI/CD pipelines, Azure, and Linux servers.