IAM Engineer - SailPoint IIQ - Senior - EY GDS
EY · Caba
Job Title: IAM Engineer – SailPoint IIQ
Location: Argentina
Rank: Senior
Service Line: Cybersecurity – Identity & Access management
Role Summary
Looking for an IAM Engineer with hands-on experience in SailPoint Identity IQ (IIQ) to support identity governance, access management, and user lifecycle processes within a large enterprise environment. The role involves implementing and maintaining Identity Governance and Administration (IGA) capabilities, supporting integrations with enterprise applications, and ensuring compliance with security and governance requirements.
Core Responsibilities
- Work on user lifecycle management processes (Joiner, Mover, Leaver).
- Support access provisioning and deprovisioning across enterprise applications.
- Manage access certifications, attestation campaigns, and compliance activities.
- Configure and maintain SailPoint IIQ workflows, rules, provisioning policies, and approval processes.
- Develop or support application integrations using REST APIs, web services, and SailPoint connectors.
- Troubleshoot provisioning, aggregation, reconciliation, and identity-related issues.
- Support role management, RBAC implementation, and entitlement governance initiatives.
- Provide L2/L3 support, including incident management, service requests, and root cause analysis.
- Participate in UAT, deployment, and post-production support activities.
- Create and maintain technical documentation, operational runbooks, and knowledge articles.
Required Skills
- 3-5 years of experience in IAM / Identity Governance and Administration (IGA).
- Hands-on experience with SailPoint IdentityIQ (IIQ).
- Strong understanding of:
- Identity Lifecycle Management (Joiner, Mover, Leaver)
- Access Provisioning & Deprovisioning
- Access Governance and Certifications
- Role-Based Access Control (RBAC)
- Segregation of Duties (SoD)
- Experience with SailPoint IIQ components such as:
- Workflows
- Rules (BeanShell)
- Forms
- Certifications
- Provisioning Policies
- Application Onboarding
- Experience with REST APIs and system integrations.
- Scripting knowledge in Java, BeanShell, Python, or PowerShell.
- Familiarity with ticketing tools such as ServiceNow, JIRA, or similar ITSM platforms.
- Strong troubleshooting, analytical, and problem-solving skills
Good to Have
- Experience working in large enterprise or global IAM environments.
- Exposure to Active Directory, Microsoft Entra ID (Azure AD), LDAP, AWS IAM, or other identity platforms.
- Experience integrating SailPoint IIQ with enterprise systems such as SAP, Oracle, Salesforce, or ServiceNow.
Understanding compliance, audit, and governance frameworks.
- Knowledge of authentication and federation standards such as SAML, OAuth, OIDC, and SCIM.
- Experience supporting SailPoint IIQ upgrades, deployments, and enhancement projects.
- SailPoint IdentityIQ certification or other IAM/Security certifications.
- Experience working in Agile delivery environments.