> Markdown version of [/jobs/ext/4551847-iam-engineer-sailpoint-identityiq-rbac-abac-pbac-opa-in-eindhoven](https://www.wearedevelopers.com/jobs/ext/4551847-iam-engineer-sailpoint-identityiq-rbac-abac-pbac-opa-in-eindhoven). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Engineer - SailPoint IdentityIQ (RBAC / ABAC / PBAC / OPA) in Eindhoven - **Company:** ITproposal B.V. - **Location:** Eindhoven, Netherlands - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Java (Programming Language), JavaScript (Programming Language), Agile Methodology, Microsoft Azure, Business Software, Software as a Service, Computer Programming, Databases, Continuous Integration, DevOps, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), Linux Servers, Scrum Methodology, Role-Based Access Control, SAP (Applications), Simple Object Access Protocol (SOAP), Systems Integration, Scripting, Okta, Integration Frameworks, SailPoint, BeanShell, Workday - **Published:** November 4, 2026 - **Apply:** https://vacaturebank-zuidwestnederland.nl/vacature/1322609/iam-engineer-sailpoint-identityiq-rbac-abac-pbac-opa-eindhoven ## About the Role * 7+ years professional experience in Identity Access Management (IAM). * Strong hands-on development experience with SailPoint IdentityIQ. * Deep knowledge of IGA, onboarding patterns, and IAM best practices. * Experience with OPA (Open Policy Agent), OPAL, or similar policy engines (highly preferred). * Proven experience implementing RBAC, ABAC, PBAC frameworks. * Strong experience designing complex workflows, rules, policies, and forms. * Experience with application onboarding into SailPoint. * Solid understanding of Identity Lifecycle Management processes. * Experience with CI/CD automation, DevOps ways of working, and Agile/SAFe environments. * Strong communication and consultancy skills for stakeholder interaction. * Knowledge of security technologies, policy frameworks, and entitlement/authorization management. Good-to-Have Skills * Scripting/programming experience: Java, Beanshell, JavaScript * Integration experience with: + LDAP + REST/SOAP + SCIM + Databases + SaaS apps (Okta) + Workday + SAP Suite * Experience with CI/CD pipelines, Azure, Linux servers, * Have deep SailPoint IdentityIQ development experience * Understand enterprise IAM architectures and policy engines * Can manage complex onboarding and integration activities * Thrive in Agile/SAFe environments * Communicate clearly with stakeholders and technical teams * Are available ASAP ## Description We are looking for a highly skilled IAM Engineer with deep expertise in Identity Governance & Administration (IGA) and hands-on development experience in SailPoint IdentityIQ. This role is ideal for a senior engineer who excels in stakeholder interaction, understands complex IAM requirements, and can deliver secure, scalable onboarding solutions across a large enterprise landscape. You will be responsible for end-to-end application onboarding, workflow development, policy implementation, and integration validation-ensuring compliance with security frameworks, RBAC/ABAC/PBAC models, and Identity Lifecycle Management processes., * Validate and implement functional and non-functional requirements for onboarding business applications into the IAM solution. * Align with architecture teams on OPAL managed-service deployment, integration design, and target solution implementation. * Configure technical application onboarding using standard IAM functionality, IAM architectural principles, and company IAM strategy. * Own the end-to-end onboarding process from intake to acceptance. * Drive standardization and automation, leveraging shared CI/CD pipelines with the SailPoint platform team. * Actively participate in Scrum / SAFe ceremonies and collaborate within an Agile DevOps environment. * Design and validate Workflows, Rules, Policies, and Forms within SailPoint IdentityIQ. * Implement and validate RBAC, ABAC, and PBAC access control frameworks. * Support Certification Processes, enforcement activities, and entitlement/authorization management. * Validate integrations with LDAP, REST/SOAP, SCIM, databases, SaaS apps (Okta), Workday, SAP Suite, and other downstream systems. * Perform operational support for Identity Lifecycle Management (Joiner, Mover, Leaver). * Monitor progress, prepare timely status reports, identify risks/dependencies, and escalate issues proactively. * Collaborate with application owners, technical teams, integration teams, and external vendors.