Identity Access Management Lead

The candidate will have responsibilities across the following functions:

Business Engagement and Workflow Architecture (60%):

• Partner directly with business unit leads, application owners, and HR teams to capture business context and gather formal Identity Governance & Administration (IGA) requirements.
• Design end-to-end Joiner-Mover-Leaver (JML) processes, birthright provisioning rules, and access request/approval workflows in SailPoint.
• Serve as the primary IAM point of contact for audit inquiries, responsible for generating audit-ready evidence, validating certification reports, and explaining governance workflows.
• Map complex application entitlement structures and business roles to support Least Privilege access enforcement and Segregation of Duties (SoD) governance.
• Translate business requirements into technical functional specifications, workflow diagrams, and onboarding roadmaps for incoming enterprise applications.

Technical Troubleshooting and System Maintenance (40%)

• Perform root-cause analysis on SailPoint operational issues, analysing task logs, environment events, and failed provisioning requests.
• Diagnose REST API, SCIM, and connector integration failures between SailPoint and downstream applications.
• Process, investigate, and resolve complex identity tier-3 incidents and change requests submitted through OneIT.
• Perform target application synchronisation checks, correlation fixes, and rule/attribute mapping adjustments to maintain identity data integrity across non-prod and prod environments.

Target Ecosystem and Integrations:

• You will design workflows and troubleshoot integrations across a diverse enterprise landscape, including: HR / Authoritative Sources: Oracle HCM.
• Directories and Cloud ID: Active Directory, Microsoft Entra ID.
• Enterprise Applications: SAP, ServiceNow, Google Workspace.
• Standards and Protocols: SCIM Applications, REST APIs, JDBC, Delimited Connectors.

Requirements:

• Identity Expertise: 8+ years of hands-on experience working with SailPoint IdentityIQ (IIQ) or Identity Security Cloud (ISC).
• Business Analysis and Design: Proven background conducting stakeholder interviews, designing RBAC models, and authoring technical workflow designs.
• Technical Troubleshooting: Strong hands-on ability to parse SailPoint log files, trace REST API / SCIM payloads, and debug aggregation/provisioning event failures.
• Ticketing and Incident Management: Hands-on experience working with enterprise ticketing systems (specifically OneIT or ServiceNow).
• Enterprise Application Onboarding: Direct experience integrating identity workflows with Oracle HCM, Active Directory, Entra ID, SAP, and SaaS platforms.