IAM Engineer - SailPoint IIQ - Senior - EY GDS

Job Title: IAM Engineer – SailPoint IIQ

Location: Argentina

Rank: Senior

Service Line: Cybersecurity – Identity & Access management

Role Summary

Looking for an IAM Engineer with hands-on experience in SailPoint Identity IQ (IIQ) to support identity governance, access management, and user lifecycle processes within a large enterprise environment. The role involves implementing and maintaining Identity Governance and Administration (IGA) capabilities, supporting integrations with enterprise applications, and ensuring compliance with security and governance requirements.

Core Responsibilities
• Work on user lifecycle management processes (Joiner, Mover, Leaver).
• Support access provisioning and deprovisioning across enterprise applications.
• Manage access certifications, attestation campaigns, and compliance activities.
• Configure and maintain SailPoint IIQ workflows, rules, provisioning policies, and approval processes.
• Develop or support application integrations using REST APIs, web services, and SailPoint connectors.
• Troubleshoot provisioning, aggregation, reconciliation, and identity-related issues.
• Support role management, RBAC implementation, and entitlement governance initiatives.
• Provide L2/L3 support, including incident management, service requests, and root cause analysis.
• Participate in UAT, deployment, and post-production support activities.
• Create and maintain technical documentation, operational runbooks, and knowledge articles.

Required Skills
• 3-5 years of experience in IAM / Identity Governance and Administration (IGA).
• Hands-on experience with SailPoint IdentityIQ (IIQ).
• Strong understanding of:
• Identity Lifecycle Management (Joiner, Mover, Leaver)
• Access Provisioning & Deprovisioning
• Access Governance and Certifications
• Role-Based Access Control (RBAC)
• Segregation of Duties (SoD)
• Experience with SailPoint IIQ components such as:
• Workflows
• Rules (BeanShell)
• Forms
• Certifications
• Provisioning Policies
• Application Onboarding
• Experience with REST APIs and system integrations.
• Scripting knowledge in Java, BeanShell, Python, or PowerShell.
• Familiarity with ticketing tools such as ServiceNow, JIRA, or similar ITSM platforms.
• Strong troubleshooting, analytical, and problem-solving skills

Good to Have

• Experience working in large enterprise or global IAM environments.
• Exposure to Active Directory, Microsoft Entra ID (Azure AD), LDAP, AWS IAM, or other identity platforms.
• Experience integrating SailPoint IIQ with enterprise systems such as SAP, Oracle, Salesforce, or ServiceNow.
Understanding compliance, audit, and governance frameworks.
• Knowledge of authentication and federation standards such as SAML, OAuth, OIDC, and SCIM.
• Experience supporting SailPoint IIQ upgrades, deployments, and enhancement projects.
• SailPoint IdentityIQ certification or other IAM/Security certifications.
• Experience working in Agile delivery environments.