IAM Engineer - AVP

About this job

Preferred candidate profile

• Experience: 9+ years of IAM experience, including 4+ years of hands-on SailPoint engineering (IdentityIQ and/or Identity Security Cloud) in enterprise, multi-region environments with large user populations (10,000+ users) and many applications.
• Deep IGA knowledge across all domains and controls: Identity lifecycle (joiner-mover-leaver), access request and approval, provisioning and reconciliation, access certification, RBAC and role mining or modelling, entitlement management, SoD and policy management, orphan and dormant account management, and non-human identity governance, with the ability to explain how each control works and how to implement and evidence it.
• SailPoint platform engineering: Proven delivery of connectors and application onboarding, aggregation and correlation, identity profiles and lifecycle states, transforms, rules, workflows, forms, certification campaigns, policies, reports and event triggers; strong understanding of platform architecture, virtual appliance or server components, and environment promotion.
• Forms and workflow design: Ability to design user-friendly request and approval forms and efficient, fault-tolerant workflows that enforce controls, minimise approvals and manual steps, and remain simple to maintain.
• ServiceNow: Hands-on experience integrating IGA with ServiceNow (service catalog, record producers and variables, Flow Designer or IntegrationHub, scripted REST APIs, RITM and task fulfilment, incident, problem and change processes) and a strong understanding of ITSM-aligned operations.
• API and integration skills: Strong experience with REST/SOAP web services, SCIM, JSON and XML, OAuth and token-based authentication, and tools such as Postman; able to build, test and debug integrations with HR systems, directories, databases, cloud and SaaS applications and PAM platforms.
• Scripting and development: 5+ years of automating processes through scripting or coding, with Java and BeanShell (IdentityIQ), JavaScript (Identity Security Cloud), and PowerShell and/or Python; ability to write SQL queries; familiarity with Git and CI/CD for controlled deployments.
• Troubleshooting: Demonstrated ability to troubleshoot complex production issues end to end (logs, task results, workflow traces, connector and API errors, performance), perform structured root cause analysis and deliver lasting fixes.
• Cyber Security and IAM fundamentals: Must demonstrate solid command of the basics, including authentication and authorization, SSO and federation (SAML, OAuth 2.0, OpenID Connect), MFA, least privilege, segregation of duties, Zero Trust principles, privileged access, directory services (Active Directory, Entra ID, LDAP), cloud identity concepts, and common identity threats and risks.
• Controls, audit and regulation: Sound understanding of IAM processes and controls, including external audit and SOX requirements, and good knowledge of control frameworks such as NIST, CRI, DORA and SOX; experience supporting evidence collection, control testing and remediation.
• Production and SDLC discipline: Experience with critical production support, application upgrades, project lifecycle and SDLC processes, release and change management, and ITSM practices (incident, problem, change, SLAs).
• Automation mindset: Track record of reducing manual effort and ticket volume through workflows, APIs and orchestration, with an interest in applying AI-assisted support under strong governance and auditability.
• Professional skills: Excellent written and verbal communication, structured problem solving, strong ownership and attention to detail, ability to work independently and as a team player, and the ability to explain technical topics clearly to senior and non-technical stakeholders.

Preferred

• SailPoint certification: Certified Identity Security Engineer (Identity Security Cloud), or equivalent SailPoint credentials
• Security and IAM certifications such as…