IAM AI Automation Engineer or Architect/AI Enablement/SailPoint

• Design and implement automated IAM workflows for Joiner-Mover-Leaver (JML), access requests, provisioning, and deprovisioning.
• Develop identity lifecycle automation integrating HR systems, Microsoft Entra ID, SailPoint, ServiceNow, and enterprise applications.
• Build integrations using REST APIs, Microsoft Graph API, JSON, PowerShell, and Python.
• Develop and enhance SailPoint IdentityIQ / Identity Security Cloud workflows, provisioning, role management, and access certifications.
• Implement identity governance, RBAC, least privilege, segregation of duties, and privileged access controls.
• Automate IAM operational processes to reduce manual effort and improve security and compliance.
• Integrate IAM platforms with Active Directory, cloud services, SaaS applications, HR systems, and ITSM platforms.
• Explore AI-assisted IAM use cases, including access-review assistance, ticket summarization, audit evidence collection, and operational support.
• Establish security and governance controls for AI agents, service principals, managed identities, bots, and other non-human identities.
• Develop dashboards, reports, alerts, operational metrics, and technical documentation.
• Troubleshoot complex identity, authentication, authorization, provisioning, and integration issues.
• Support IAM audits, access reviews, compliance requirements, and remediation activities.
• Collaborate with cybersecurity, infrastructure, cloud, application, HR, and compliance teams., * Improved IAM automation and identity lifecycle processing.
• Reduced manual provisioning and operational effort.
• Improved access governance and security controls.
• Stronger audit readiness and compliance.
• Secure adoption of AI-assisted IAM capabilities.

We are seeking an experienced Senior IAM Automation Engineer to design, develop, and implement scalable Identity and Access Management (IAM) automation solutions across enterprise environments.

The ideal candidate will have strong hands-on experience with Microsoft Entra ID, SailPoint IdentityIQ / Identity Security Cloud (ISC), identity lifecycle management, and security automation.

This role will focus on automating Joiner-Mover-Leaver (JML) processes, identity governance, access provisioning, privileged access, cloud identity, and enterprise application integrations. Experience with AI-assisted IAM automation and non-human identity governance is highly desirable., * 12+ years of experience in IAM, Identity Engineering, Cybersecurity, or Security Automation.

• Strong hands-on experience with Microsoft Entra ID / Azure AD.
• Strong experience with SailPoint IdentityIQ (IIQ) or Identity Security Cloud (ISC), or comparable IGA platforms.
• Experience designing and implementing Joiner-Mover-Leaver (JML) workflows.
• Strong knowledge of automated provisioning, deprovisioning, access certifications, role management, and entitlement management.
• Hands-on development experience with PowerShell, Python, REST APIs, JSON, and Microsoft Graph API.
• Experience integrating IAM platforms with HR systems, ServiceNow, Active Directory, cloud services, and enterprise applications.
• Knowledge of IAM, IGA, PAM, authentication, authorization, RBAC, ABAC, and least privilege.
• Experience working across cloud and on-premises identity environments.
• Strong troubleshooting, communication, and documentation skills., * Experience with Microsoft Entra ID Governance, PIM, Access Reviews, Entitlement Management, and Conditional Access.
• Experience with Azure Automation, Azure Functions, Logic Apps, Azure DevOps, Git, and CI/CD.
• Experience with ServiceNow integrations and enterprise ITSM workflows.
• Knowledge of SailPoint, Saviynt, Okta, Auth0, CyberArk, BeyondTrust, or Delinea.
• Experience with Microsoft Copilot, Generative AI, AI agents, and AI-assisted security automation.
• Knowledge of non-human identity governance, managed identities, service principals, and machine identities.
• Experience with Azure and/or AWS cloud security.
• Knowledge of NIST, ISO 27001, SOC 2, PCI DSS, and SOX compliance requirements.
• Experience with IAM transformations, platform migrations, and identity modernization initiatives.
• Power BI or similar reporting and analytics experience., * Bachelor’s degree in Computer Science, IT, Cybersecurity, Engineering, or a related field preferred.
• Equivalent professional experience may be considered.
• Preferred certifications:
• CISSP
• Microsoft Identity and Access Administrator Associate
• Microsoft Azure Security Engineer Associate
• SailPoint Certifications
• CyberArk Certifications

Key Technologies

IAM / IGA: SailPoint IIQ, SailPoint ISC, Saviynt, Microsoft Entra ID, Okta, Auth0

PAM: CyberArk, BeyondTrust, Delinea

Automation: PowerShell, Python, REST APIs, JSON, Microsoft Graph API

Azure: Entra ID Governance, PIM, Access Reviews, Logic Apps, Azure Functions, Azure Automation

ITSM / DevOps: ServiceNow, Azure DevOps, Git, CI/CD

AI: Microsoft Copilot, Generative AI, AI Agents, Non-Human Identity Governance

Reporting: Power BI, IAM Dashboards, Operational Metrics