Senior IAM Engineer - SailPoint IIQ

About the role

EY is looking for a Senior IAM Engineer with hands-on experience in SailPoint Identity IQ (IIQ) to support identity governance, access management and user lifecycle processes in a large enterprise environment. The role covers implementing and maintaining Identity Governance and Administration (IGA) capabilities, supporting integrations with enterprise applications and ensuring compliance with security and governance requirements.

Key responsibilities

• Work on user lifecycle management (joiner, mover, leaver).
• Support access provisioning and deprovisioning across enterprise applications.
• Manage access certifications, attestation campaigns and compliance activities.
• Configure and maintain SailPoint IIQ workflows, rules, provisioning policies and approval processes.
• Develop or support integrations using REST APIs, web services and SailPoint connectors.
• Troubleshoot provisioning, aggregation, reconciliation and identity issues.
• Support role management, RBAC implementation and entitlement governance.
• Provide L2/L3 support, including incident management, service requests and root cause analysis.
• Take part in UAT, deployment and post-production support.
• Create and maintain technical documentation, runbooks and knowledge articles.

Required profile

• 3-5 years of experience in IAM / Identity Governance and Administration (IGA).
• Hands-on experience with SailPoint IdentityIQ (IIQ).
• Strong understanding of identity lifecycle, access provisioning, access governance, RBAC and segregation of duties.
• Experience with SailPoint IIQ components such as workflows, rules (BeanShell), forms, certifications, provisioning policies and application onboarding.
• Experience with REST APIs and system integrations.
• Familiarity with ticketing tools such as ServiceNow, JIRA or similar ITSM platforms.

Required skills

• Scripting in Java, BeanShell, Python or PowerShell.
• Good troubleshooting, analytical and problem-solving skills.
• Nice to have: large enterprise IAM experience, exposure to Active Directory, Azure AD, LDAP, AWS IAM, SAML, OAuth, OIDC and SCIM, integration with SAP, Oracle, Salesforce or ServiceNow, SailPoint IIQ upgrade/deployment experience, Agile delivery experience and relevant certifications.