Platform Engineer, IAM Identity Gov. & Admin.
Mondelez International13 days ago
Remote, Spain or Remote, EMEAStaff+
Responsibilities
- Design, develop, and deploy SailPoint IdentityIQ workflows, rules, custom connectors, lifecycle events, certifications, and RBAC, ABAC, and PBAC access models.
- Act as the primary operational SME for the IdentityIQ platform, managing platform health, aggregation and provisioning issues, root-cause analysis, upgrades, and change control.
- Run access certification campaigns, including manager, entitlement-owner, micro-certification, and segregation-of-duties reviews.
- Enhance Joiner-Mover-Leaver workflows from birthright provisioning through de-provisioning and orphan-account cleanup.
- Lead role mining, role engineering, entitlement rationalization, access governance, privileged-access integration, and just-in-time provisioning.
- Align IGA processes with SOX, GDPR, HIPAA, PCI-DSS, NIST 800-53, and ISO 27001 requirements and produce audit-ready reporting and evidence.
- Build integrations with ServiceNow, Jira, SIEM/SOAR, PAM tools, and multi-cloud IAM environments.
- Partner with application owners, HR, IT Security, and business teams to drive adoption and report platform-maturity KPIs.
Requirements
- 10+ years of experience in Identity and Access Management, including 7+ years of hands-on IGA platform engineering.
- Expert-level SailPoint IdentityIQ experience with workflows, rules, connectors, lifecycle events, certifications, and role modeling.
- Strong Java and BeanShell scripting skills plus experience with SQL, XML, JSON, REST APIs, and web services.
- Experience with LDAP, Active Directory, Azure AD/Entra ID, enterprise directory services, SCIM, SAML 2.0, OAuth 2.0, OpenID Connect, and CI/CD pipelines.
- Knowledge of NIST CSF 2.0, NIST 800-53, ISO 27001/27002, Zero Trust Architecture, and COBIT 2019.
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
- Preferred qualifications include SailPoint certifications, CISSP, CISM, CISA, SailPoint Identity Security Cloud, IIQ-to-ISC migration planning, ITDR, CyberArk PAM, cloud permission governance, ServiceNow ITSM, AI/ML identity analytics, identity data governance, and non-human identity governance.
Benefits
- Regular full-time position.
- No relocation support is available.