Senior IAM Engineer - SailPoint ISC

About the role

EY GDS is looking for a Senior IAM Engineer with hands-on SailPoint Identity Security Cloud (ISC) experience to support Identity Governance and Administration (IGA) services in a large enterprise environment. The role sits in the Cybersecurity - Identity & Access Management service line and works within an IAM delivery team covering identity lifecycle management, access provisioning, application onboarding, certifications, integrations, troubleshooting and day-to-day SailPoint ISC operations. It is aimed at a Senior 1-2 level professional who can work independently and collaborate with senior engineers, application teams and business stakeholders.

Key responsibilities

• Support and administer SailPoint ISC, including Joiner, Mover and Leaver processes, account provisioning and deprovisioning, and access certifications and reviews.
• Configure Identity Profiles, Lifecycle States, Access Profiles, Roles and Entitlements, and ISC connectors, workflows and transforms.
• Support source onboarding, identity aggregation, account correlation and synchronization, and integrations via REST APIs.
• Troubleshoot provisioning failures, aggregation and correlation issues, and perform root-cause analysis and incident resolution.
• Maintain technical documentation, procedures and knowledge articles, and support governance, compliance and audit activities.
• Work within enterprise ticketing and change-management processes and collaborate with application owners, security and infrastructure teams.

Required profile

• 3-5 years of experience in IAM, Identity Governance or related cybersecurity areas.
• Hands-on SailPoint ISC experience and good understanding of IGA concepts.
• Experience with JML processes, provisioning/deprovisioning, identity aggregation, account correlation, access certifications and troubleshooting IAM issues.
• Ability to work independently with limited supervision, strong analytical and troubleshooting skills, and good written and verbal English.

Required skills

• SailPoint Identity Security Cloud (ISC)
• REST APIs and JSON
• Enterprise ticketing tools such as ServiceNow or JIRA
• Good to have: ISC sources, connectors, transforms and workflows, OAuth 2.0, SCIM, Python or PowerShell scripting, Microsoft Entra ID / Azure AD, AWS IAM, RBAC, SoD, and access certification campaign experience.