Identity Access Management Lead

The candidate will have responsibilities across the following functions:
Business Engagement and Workflow Architecture (60%):
Partner directly with business unit leads, application owners, and HR teams to capture business context and gather formal Identity Governance & Administration (IGA) requirements.
Design end-to-end Joiner-Mover-Leaver (JML) processes, birthright provisioning rules, and access request/approval workflows in SailPoint.
Serve as the primary IAM point of contact for audit inquiries, responsible for generating audit-ready evidence, validating certification reports, and explaining governance workflows.
Map complex application entitlement structures and business roles to support Least Privilege access enforcement and Segregation of Duties (SoD) governance.
Translate business requirements into technical functional specifications, workflow diagrams, and onboarding roadmaps for incoming enterprise applications.
Technical Troubleshooting and System Maintenance (40%)
Perform root-cause analysis on SailPoint operational issues, analysing task logs, environment events, and failed provisioning requests.
Diagnose REST API, SCIM, and connector integration failures between SailPoint and downstream applications.
Process, investigate, and resolve complex identity tier-3 incidents and change requests submitted through OneIT.
Perform target application synchronisation checks, correlation fixes, and rule/attribute mapping adjustments to maintain identity data integrity across non-prod and prod environments.
Target Ecosystem and Integrations:
You will design workflows and troubleshoot integrations across a diverse enterprise landscape, including: HR / Authoritative Sources: Oracle HCM.
Directories and Cloud ID: Active Directory, Microsoft Entra ID.
Enterprise Applications: SAP, ServiceNow, Google Workspace.
Standards and Protocols: SCIM Applications, REST APIs, JDBC, Delimited Connectors.
Requirements:
Identity Expertise: 8+ years of hands-on experience working with SailPoint IdentityIQ (IIQ) or Identity Security Cloud (ISC).
Business Analysis and Design: Proven background conducting stakeholder interviews, designing RBAC models, and authoring technical workflow designs.
Technical Troubleshooting: Strong hands-on ability to parse SailPoint log files, trace REST API / SCIM payloads, and debug aggregation/provisioning event failures.
Ticketing and Incident Management: Hands-on experience working with enterprise ticketing systems (specifically OneIT or ServiceNow).
Enterprise Application Onboarding: Direct experience integrating identity workflows with Oracle HCM, Active Directory, Entra ID, SAP, and SaaS platforms.

Skills
Access Management, IAM, IIQ, ISC, Identity, Identity Security Cloud, IdentityIQ, SailPoint

Experience
8-12 yrs