Identity & Access Management SailPoint Engineer

About the role

We are looking for an experienced Identity & Access Management (IAM) Engineer to lead the design, implementation and operation of SailPoint solutions for our Mexico operations. The role combines strategic governance, platform ownership and hands‑on engineering to secure access across on‑premise and cloud applications.

Key responsibilities

• Define and execute IAM/IGA strategy aligned with cybersecurity and digital transformation goals.
• Establish governance frameworks for identity lifecycle, RBAC/ABAC, SoD controls and certification campaigns.
• Provide architectural oversight for SailPoint IdentityIQ and File Access Manager, ensuring scalability, performance and high availability.
• Lead onboarding of enterprise applications, configure connectors, develop Beanshell/Java rules and custom integrations.
• Implement automated Joiner‑Mover‑Leaver processes and integrate HR (Workday), AD, Azure AD, LDAP and cloud platforms (AWS, Azure, GCP).
• Maintain compliance with SOX, GLBA, PCI‑DSS, ISO 27001 and drive access certification and remediation.
• Manage a team of IAM engineers, apply DevSecOps practices and oversee incident response and monitoring.
• Collaborate with application owners and business units, presenting IAM metrics to senior leadership.

Required profile

• Proven experience designing and operating SailPoint IdentityIQ (or IdentityNow) in large enterprises.
• Strong understanding of IAM governance, role‑based and attribute‑based access control, and segregation‑of‑duties.
• Hands‑on expertise in integrating HR systems, directory services and major cloud providers.
• Experience leading technical teams and managing vendor relationships.
• Ability to translate security requirements into scalable automation and monitoring solutions.

Required skills

• SailPoint IdentityIQ / IdentityNow
• File Access Manager (FAM)
• Beanshell, Java
• Workday integration
• Active Directory, Azure AD, LDAP
• AWS, Azure, GCP
• RBAC, ABAC, SoD, role modeling
• DevSecOps, API‑driven automation
• Monitoring and incident response tools