Identity & Access Management SailPoint Engineering

Location: OFNA TECH AND OPER CDMX

Time Type: Full time

Job Description

Identity & Access Management SailPoint Engineering

Country: Mexico

Key Responsibilities

1. Strategic Leadership & Governance

- Define and execute the IAM/IGA strategy aligned with enterprise cybersecurity and digital transformation objectives.

- Establish governance frameworks for identity lifecycle management, RBAC/ABAC, SoD controls, and certification campaigns.

- Develop and maintain IAM roadmaps, investment plans, and KPIs.

- Drive modernization initiatives including migration to SailPoint IdentityNow (if applicable) and cloud-first identity architecture.

2. SailPoint Platform Ownership

- Provide architectural oversight and engineering leadership for SailPoint (IdentityIQ) and File Access Manager (FAM).

- Ensure platform scalability, resilience, performance tuning, and high availability.

- Lead onboarding of enterprise applications (on-prem, SaaS, cloud, legacy systems).

- Oversee connector configurations, rule development (Beanshell/Java), workflows, and custom integrations.

- Manage role modeling, access policies, and entitlement governance frameworks.

3. Identity Lifecycle & Automation

- Implement automated Joiner-Mover-Leaver (JML) processes.

- Integrate HR systems (e.g., Workday), Active Directory, Azure AD, LDAP, cloud platforms (AWS/Azure/GCP), and business-critical applications.

- Reduce manual provisioning through orchestration and API-driven automation.

- Establish measurable SLAs for provisioning and de-provisioning.

4. Compliance, Risk & Audit

- Ensure alignment with regulatory and compliance frameworks (e.g., SOX, GLBA, PCI-DSS, FFIEC, ISO 27001).

- Lead access certification campaigns and remediation processes.

- Partner with Internal Audit and Risk teams to address findings and improve control maturity.

- Maintain documentation, control evidence, and audit-ready posture.

5. Engineering & Operations Management

- Lead, mentor, and scale a team of IAM engineers and architects.

- Implement DevSecOps practices for SailPoint code deployment and change management.

- Establish operational monitoring, incident response processes, and root cause analysis for IAM services.

- Manage vendor relationships and third-party IAM service providers.

6. Stakeholder Engagement

- Partner with Application Owners and Business Units for secure onboarding and access governance.

- Present IAM metrics and risk posture to senior leadership and governance committees.

- Drive cross-functional alignment on identity standards and best practices.