Platform Engineer, IAM Identity Gov. & Admin
Mondelez International20 hours ago
Remote, Spain or Remote, PolandStaff+
Responsibilities
- Design, develop, and deploy SailPoint IdentityIQ workflows, rules, custom connectors, and RBAC/ABAC/PBAC access models.
- Own operational support for the IdentityIQ platform, including platform health, aggregation and provisioning issues, root-cause analysis, upgrades, and change control.
- Run access certification campaigns, including manager, entitlement-owner, micro-certification, and segregation-of-duties reviews.
- Enhance Joiner, Mover, and Leaver workflows from birthright provisioning through de-provisioning and orphan-account cleanup.
- Lead role mining, role engineering, and entitlement rationalization.
- Govern privileged access through PAM integration, segregation-of-duties enforcement, and just-in-time provisioning.
- Maintain alignment with SOX, GDPR, HIPAA, PCI-DSS, NIST 800-53, and ISO 27001 requirements, including audit-ready reporting and evidence.
- Build integrations with ServiceNow, Jira, SIEM/SOAR platforms, and AWS, Azure, and GCP IAM environments.
- Partner with application owners, HR, IT Security, and business teams to drive adoption and report platform-maturity KPIs.
- Manage relevant third-party providers and provide information security training to appropriate teams.
Requirements
- 10+ years of experience in Identity and Access Management, including 7+ years of hands-on IGA platform engineering.
- Expert-level SailPoint IdentityIQ experience with workflows, rules, connectors, lifecycle events, certifications, and role modeling.
- Strong Java and BeanShell scripting experience, with SQL, XML, JSON, REST APIs, and web services.
- Experience with LDAP, Active Directory, Azure AD/Entra ID, and enterprise directory services.
- Knowledge of SCIM, SAML 2.0, OAuth 2.0, OpenID Connect, and CI/CD pipelines using Git, Jenkins, and Ansible.
- Knowledge of NIST CSF 2.0, NIST 800-53, ISO 27001/27002, Zero Trust Architecture, and COBIT 2019.
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
- SailPoint certifications, CISSP, CISM, or CISA are preferred.
- Strong communication, analytical, problem-solving, collaboration, and information-security governance skills.
Benefits
- Regular position with no relocation support available.
- Equal opportunity employment with consideration for qualified applicants without regard to legally protected characteristics.
About Mondelez International
Mondelez International (NASDAQ: MDLZ) manufactures and markets snack foods—including Oreo and belVita biscuits; Cadbury, Milka and Toblerone chocolates; Trident gum; and Sour Patch Kids candy—to consumers worldwide through retail and e‑commerce channels. Formed in 2012 via the spin-off of Kraft Foods’ global snacks business, it is headquartered in the Chicago area. The company operates in more than 150 countries with a portfolio spanning biscuits, chocolate, gum, and candy.