Identity Security Engineering - SailPoint, Vice President

About this role
Job Description
We are seeking a Vice President, Identity Security Engineer to help shape and deliver a major identity modernisation programme, migrating from SailPoint IdentityIQ to SailPoint Identity Security Cloud. This is a hands-on technical leadership role for an engineer who enjoys solving complex security, data, integration and operating-model challenges at enterprise scale. You will work with engineering, security, operations and business partners to design a modern identity platform that is secure, resilient, scalable and easier for people to use. The successful candidate will combine deep SailPoint and identity governance expertise with the judgement, ownership and communication skills needed to lead complex changes across a global organisation.
Key Responsibilities
Lead the technical design and delivery of the migration from SailPoint IdentityIQ to SailPoint Identity Security Cloud, treating the move as a platform transformation rather than a like-for-like upgrade.
Define the future-state identity architecture, including identity data models, application onboarding patterns, access request processes, provisioning, deprovisioning, certifications and policy controls.
Translate complex IdentityIQ workflows, rules, connectors and customisations into secure, maintainable, cloud-aligned designs using Identity Security Cloud capabilities and extensibility options.
Make practical engineering decisions that balance security, user experience, delivery risk, regulatory expectations and long-term maintainability.
Partner with application, infrastructure, cloud, HR, operations, risk and compliance teams to resolve dependencies and keep delivery moving across a complex enterprise environment.
Lead technical planning across discovery, design, build, testing, parallel run, cutover and operational readiness, with clear ownership of risks, dependencies and outcomes.
Set high engineering standards for documentation, testing, observability, change control, resilience and secure-by-design delivery.
Coach engineers, share technical knowledge and create an environment where teams can make good decisions quickly and safely.
Identify opportunities to simplify legacy processes, reduce manual effort, improve controls and unlock the benefits of a modern cloud identity platform.
Qualifications / Competencies
Strong hands-on experience designing, building or leading SailPoint IdentityIQ, SailPoint Identity Security Cloud, or comparable identity governance platforms.
Experience with IdentityIQ to Identity Security Cloud migration, cloud identity transformation, or modernisation of a mature identity governance environment.
Deep understanding of identity governance and administration, including joiner, mover and leaver processes, access requests, certifications, role models, policies and segregation of duties.
Ability to assess existing workflows, rules, connectors, data flows and customisations, then redesign them for a more scalable and maintainable cloud platform.
Strong engineering background across APIs, integrations, directories, HR sources, application onboarding, automation and secure system design.
Experience integrating identity platforms with Microsoft Entra ID, Active Directory, LDAP, HR systems, SaaS applications, on-premises applications and privileged access platforms.
Comfortable leading technical discussions with senior stakeholders and explaining complex engineering trade-offs in clear, practical language.
Proven ability to lead complex initiatives across distributed teams, manage ambiguity and drive delivery without losing sight of quality or risk.
Strong ownership mindset, with the ability to anticipate problems, remove blockers and make decisions that move the programme forward.
Clear communicator who can build trust with engineering teams, business partners and control functions.
Desirable Skills
SailPoint certification, Identity Security Cloud Engineer certification, CISSP, CISM or similar security qualification.
Experience using identity analytics, risk-based access insights or AI-assisted governance to improve access decisions and reduce manual review effort.
Experience with CyberArk or other privileged access management technologies.
Experience delivering security or identity change in regulated, high-scale or highly governed environments.
Understanding of Zero Trust, least privilege, non-human identities, cloud security and modern access governance patterns.
Experience simplifying legacy processes and helping teams adopt more modern engineering practices.
Our benefits
To help you stay energized, engaged and inspired, we offer a wide range of employee benefits including: retirement investment and tools designed to help you in building a sound financial future; access to education reimbursement; comprehensive resources to support your physical health and emotional well-being; family support programs; and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about.
Our hybrid work model
BlackRock’s hybrid work model is designed to enable a culture of collaboration and apprenticeship that enriches the experience of our employees, while supporting flexibility for all. Employees are currently required to work at least 4 days in the office per week, with the flexibility to work from home 1 day a week. Some business groups may require more time in the office due to their roles and responsibilities. We remain focused on increasing the impactful moments that arise when we work together in person – aligned with our commitment to performance and innovation. As a new joiner, you can count on this hybrid model to accelerate y