IAM Engineer - SailPoint IIQ - Senior - EY GDS | ErnstYoung Job

Job Description

Job Title: IAM Engineer – SailPoint IIQ
Location: Argentina
Rank: Senior 1-2
Service Line: Cybersecurity – Identity & Access management
Role Summary
Looking for an IAM Engineer with hands-on experience in SailPoint Identity IQ (IIQ) to support identity governance, access management, and user lifecycle processes within a large enterprise environment. The role involves implementing and maintaining Identity Governance and Administration (IGA) capabilities, supporting integrations with enterprise applications, and ensuring compliance with security and governance requirements.
Core Responsibilities
• Work on user lifecycle management processes (Joiner, Mover, Leaver). 
• Support access provisioning and deprovisioning across enterprise applications. 
• Manage access certifications, attestation campaigns, and compliance activities. 
• Configure and maintain SailPoint IIQ workflows, rules, provisioning policies, and approval processes. 
• Develop or support application integrations using REST APIs, web services, and SailPoint connectors. 
• Troubleshoot provisioning, aggregation, reconciliation, and identity-related issues. 
• Support role management, RBAC implementation, and entitlement governance initiatives. 
• Provide L2/L3 support, including incident management, service requests, and root cause analysis. 
• Participate in UAT, deployment, and post-production support activities. 
• Create and maintain technical documentation, operational runbooks, and knowledge articles.
Required Skills
• 3-5 years of experience in IAM / Identity Governance and Administration (IGA). 
• Hands-on experience with SailPoint IdentityIQ (IIQ). 
• Strong understanding of: 
•    Identity Lifecycle Management (Joiner, Mover, Leaver)
•    Access Provisioning & Deprovisioning
•    Access Governance and Certifications
•    Role-Based Access Control (RBAC)
•    Segregation of Duties (SoD)
• Experience with SailPoint IIQ components such as: 
•    Workflows
•    Rules (BeanShell)
•    Forms
•    Certifications
•    Provisioning Policies
•    Application Onboarding
• Experience with REST APIs and system integrations. 
• Scripting knowledge in Java, BeanShell, Python, or PowerShell. 
• Familiarity with ticketing tools such as ServiceNow, JIRA, or similar ITSM platforms. 
• Strong troubleshooting, analytical, and problem-solving skills

Good to Have
• Experience working in large enterprise or global IAM environments. 
• Exposure to Active Directory, Microsoft Entra ID (Azure AD), LDAP, AWS IAM, or other identity platforms. 
• Experience integrating SailPoint IIQ with enterprise systems such as SAP, Oracle, Salesforce, or ServiceNow. 
Understanding compliance, audit, and governance frameworks. 
• Knowledge of authentication and federation standards such as SAML, OAuth, OIDC, and SCIM. 
• Experience supporting SailPoint IIQ upgrades, deployments, and enhancement projects. 
• SailPoint IdentityIQ certification or other IAM/Security certifications. 
• Experience working in Agile delivery environments.