Senior IAM / IGA Engineer

Assignment Description We are looking for a Senior IAM / IGA Engineer for an assignment involving development, implementation and operational support of Identity and Access Management solutions in a complex enterprise environment spanning both IT and OT. The assignment requires at least two onsite days per week. Other working arrangements, including work from another country, require prior approval and may be subject to change. The role includes contributing to the continued development and rollout of an IGA platform, with a focus on technical implementation, architectural input and access governance in environments with specific security and compliance requirements. You will work with business, IT and OT stakeholders and support onboarding of systems and assets as part of the rollout. The rollout is expected to continue over the coming years, with important delivery milestones planned for later this year and the beginning of the following year, followed by further phases. You will also provide IAM-related guidance to stakeholders and help translate security and regulatory requirements into scalable access governance solutions that can be integrated into operational and delivery processes. The assignment covers requirements analysis, technical and low-level design implementation, code review, user acceptance testing, and support before and after deployment. Operational responsibilities include IAM platform support, user issues and queries, certificate changes, advanced troubleshooting, maintenance, patching, security fixes, releases and hotfixes. You will also perform user and access administration in Active Directory, including management of users and groups, password resets and access reviews. The work includes application lifecycle management and onboarding in the IGA environment, across integration types such as Active Directory, delimited files, Linux, Windows Server and REST. You will also support the lead engineer with development and support activities related to the IGA platform. Required Qualifications: Ability to work effectively with virtual, culturally diverse teams and stakeholders across different time zones, with clear communication across technical and non-technical audiences. Hands-on experience with Active Directory administration, including users, groups and lifecycle activities, together with proven experience onboarding applications to IAM/IGA platforms and applying best practices for integrations, entitlement modelling and lifecycle workflows. Experience working in SAFe/agile delivery, including participation in PI Planning, system demos and Inspect & Adapt, as well as close collaboration with Product Management, RTEs and System Teams. At least two to three years of hands-on technical implementation experience with SailPoint IdentityIQ (IIQ), covering configuration, customization, maintenance and troubleshooting in enterprise environments. Completion of a background check is required before onboarding to the assignment. Strong practical experience with IAM and Access Governance platforms in large-scale, multi-site environments, together with a solid understanding of identity lifecycle management, access governance and role-based access control (RBAC). Experience supporting technical maintenance, enhancements and incident resolution across one or more IAM technologies, with responsibility for maintaining platform stability and security. It is considered an advantage if you have experience from the OT domain and working knowledge of PowerShell for automation and operational efficiency.