IAM Engineer - Identity Governance
Role details
Job location
Tech stack
Job description
Sandoz is a global market leader in Biosimilar and Generics medicine, a market leader in a sector is helped pioneer. Our Vision is to be the world's leading and most valued generic and biosimilar medicine company. We are pursuing access to medicine goals in two areas:
-
ensuring responsible access to critical antibiotics which is seen as the backbone of modern medicine, and
-
democratizing access to biologic therapies through healthy competition As a Senior Sailpoint ISC Engineer you will support the evolution of our Identity & Access Management governance platform with a strong focus on implementation, integration and continuous improvement of Sailpoint ISC capabilities in a complex and regulated environment. This role will focus primarily on application integrations, complex troubleshooting and end-to-end implementation of IAM processes, including lifecycle management, least privilege access, role modeling, solution design and connector deployment. Your responsibilities will include:
-
Execute end-to-end onboarding of applications into Sailpoint ISC, including attribute mapping, entitlement modeling and connector configuration (OOTB and custom) and API-based integrations (SAP integration experience is desirable)
-
Troubleshoot and resolve complex issues related to identity data, provisioning failures and connector performance.
-
Ensure data consistency and quality across identity sources, including troubleshooting data inconsistencies and reconciliation issues.
-
Implement and support identity lifecycle processes (Joiner, Mover, Leaver), ensuring correct automation, data mapping and alignment with downstream provisioning and access processes.
-
Configure, maintain, and enhance Sailpoint ISC components: sources, entitlements, roles, access profiles, lifecycles, UAR, rule-based policies, including identity profiles, transforms, workflows and provisioning policies.
-
Implement and maintain access controls based on the principle of least privilege, including policy configuration (SoD, birthright access, dynamic access where applicable).
-
Support testing activities (unit, integration and UAT) ensuring quality of deployments.
-
Coordinate with internal teams and external vendors to ensure high-quality delivery for integration and troubleshooting activities.
-
Review technical changes within the IAM domain and propose operational improvements within Sailpoint ISC configurations and integrations.
-
Contribute to the definition and maintenance of role models and access policies, including implementation of RBAC roles and support to role mining activities.
-
Collaborate with security, compliance and business teams to ensure alignment with regulatory requirements (GxP, GDPR…).
-
Own and maintain technical documentation related to design changes, configurations, integrations ensuring documentation is accurate and aligned with implementation. What You Need To Bring To The Role
Requirements
- University degree or equivalent experience in computer science, engineering or information technology or other relevant field
- Certifications in Sailpoint ISC Engineer / Professional or equivalent hands-on experience
- Minimum 5-7 years of experience in IAM projects, preferably in the pharmaceutical or other highly regulated industries.
- Minimum 3-5 years of hands-on experience with Sailpoint Identity Security Cloud (ISC), including identity profiles, workflows, transforms, provisioning and access certifications.
- Strong understanding of the end-to-end IAM processes, including identity lifecycle, role modeling, provisioning, user access review and data reconciliation challenges.
- Experience working with complex, non-standard integrations and identity data flows.
- Hands-on experience with API-based integrations including REST APIs and JSON-based integrations (SAP integration experience is a plus).
- Strong analytical skills with ability to debug complex identity and provisioning issues across multiple systems.
- Ability to translate business requirements into effective IAM solutions and propose technical improvements when needed.
- Strong problem-solving skills and excellent communication abilities with ability to work in cross-functional teams.
- Fluent in written and spoken English