SailPoint IdentityIQ (IIQ) / IAM Engineer – Access Governance & OT

About the Assignment We are looking for an experienced IAM Engineer with hands-on SailPoint IdentityIQ (IIQ) expertise to support the end-to-end delivery of IAM solutions within the Access Governance domain. The consultant will play a key role in the architecture, implementation, rollout, and ongoing operation of the IGA platform across both IT and OT environments , working closely with business units, global IT, OT stakeholders, and engineering teams. Key Responsibilities - Own and contribute to the end-to-end IAM solution delivery within the Access Governance domain, ensuring secure, compliant, and fit-for-purpose implementation of the IAM platform across IT and OT environments. - Lead and support the architecture and rollout of the IGA solution for the OT domain, engaging with business units, global IT, and OT stakeholders to address regulatory, partner, and customer security requirements. - Shape and execute the OT IAM rollout roadmap, onboarding OT assets onto the IGA platform and driving delivery against key Go-Live milestones in Q2 2026, Q1 2027, and subsequent phases. - Apply and uphold Ørsted IAM security best practices, guidelines, blueprints, and design patterns, ensuring alignment with enterprise architecture principles and OT-specific constraints. - Act as a trusted IAM advisor to stakeholders, translating security concerns and regulatory requirements into scalable access governance solutions embedded into operational and delivery processes. Day-to-Day Responsibilities OT IGA Rollout Support the OT IGA project rollout, with continuous asset rollout throughout 2026–2028. This includes requirement analysis and review, technical and low-level design implementations, code reviews, UAT, and support for pre- and post-deployment activities. Platform Operations & Support Provide operational platform support for Ørsted, including basic user issues and queries, certificate changes, advanced troubleshooting, patch and SailPoint security fixes management, releases, and hotfixes. Active Directory Administration Perform operational user administration tasks in Active Directory, including managing users and groups, resetting passwords, and conducting access reviews. Application Lifecycle Management Perform application lifecycle management across the IGA solution for applications within the OT landscape, including: - Active Directory - Delimited files - Linux - Windows Server - REST Engineering Support Provide support to the Lead Engineer on development and support tasks required across the IGA platform. Requirements SailPoint IdentityIQ 2–3+ years of hands-on technical implementation experience with SailPoint IdentityIQ (IIQ) , including configuration, customization, maintenance, and troubleshooting in enterprise environments. IAM Engineering & Operations Strong practical experience with IAM and Access Governance platforms in large-scale, multi-site environments, with a solid understanding of: - Identity Lifecycle Management - Access Governance - Role-Based Access Control (RBAC) Experience within the OT domain is considered an advantage. Active Directory & Automation Hands-on experience with Active Directory user, group, and lifecycle administration. Working knowledge of PowerShell for automation and operational efficiency is a plus. Application Onboarding & Platform Delivery Proven experience onboarding applications into IAM/IGA platforms , applying best practices for integrations, entitlement modelling, and lifecycle workflows. Technical Troubleshooting Ability to support technical maintenance, enhancements, and incident resolution across one or more IAM technologies, ensuring platform stability and security. Agile / SAFe Experience working in SAFe/agile delivery environments , including participation in: - PI Planning - System Demos - Inspect & Adapt - Collaboration with Product Management, RTEs, and System Teams Collaboration & Stakeholder Management Ability to work effectively with virtual and culturally diverse teams and stakeholders across multiple time zones, communicating clearly with both technical and non-technical audiences. Location: Gentofte, Denmark Work model: Remote Domain: IAM / IGA / Access Governance / OT Platform: SailPoint IdentityIQ (IIQ)