Sailpoint Engineer- Leeds

FDM Group Ltd.; Leeds; Hybrid; GBP 55,000 - 75,000; Full time

Job summary

A global consultancy firm is seeking an experienced SailPoint Engineer based in Leeds for an 8-month hybrid contract. The role involves designing and maintaining IAM infrastructure, managing identity governance, and integrating with various platforms. Ideal candidates will have extensive SailPoint experience, knowledge of IAM concepts, and scripting abilities. Opportunities for professional development and a dynamic working environment are offered.

Benefits

Career coaching

Annual leave

Work-place pension

Qualifications

• 3-5+ years of hands-on experience with SailPoint IdentityIQ or IdentityNow.
• Strong understanding of IAM concepts, including access certifications.
• Experience with connector development and application integrations.

Responsibilities

• Design, develop, and maintain SailPoint IdentityIQ/IdentityNow implementations.
• Implement and manage role-based access control (RBAC) models.
• Develop and maintain custom integrations and APIs.

Skills

SailPoint IdentityIQ/IdentityNow

IAM concepts (provisioning, deprovisioning, RBAC)

Java

BeanShell

XML

SQL

PowerShell

Scripting skills (Python, Bash)

Tools

Microsoft Active Directory

Azure AD

ServiceNow

Job description

About The Role

FDM is a global business and technology consultancy seeking an experienced SailPoint Engineer to design, implement, and maintain their Identity and Access Management (IAM) infrastructure. This is initially an 8 month contract with the potential to extend and will be a hybrid role based in Leeds.

The ideal candidate will have deep expertise in SailPoint platforms and a strong understanding of identity governance and administration principles. Experience with the broader Microsoft identity and security ecosystem is highly valued as our client continues to integrate IAM solutions across their technology stack.

Responsibilities

• Platform Management: Design, develop, and maintain SailPoint IdentityIQ/IdentityNow implementations
• Platform Management: Configure and customize workflows, lifecycle events, provisioning policies, and certification campaigns
• Platform Management: Develop and maintain application integrations using connectors (JDBC, SCIM, web services, flat files)
• Platform Management: Create and optimize custom rules, workflows, and forms using BeanShell, Java, and XML
• Platform Management: Perform platform upgrades, patches, and performance tuning
• Identity Governance: Implement and manage role-based access control (RBAC) models and role mining initiatives
• Identity Governance: Configure and execute access certification campaigns for compliance requirements
• Identity Governance: Develop and maintain joiner/mover/leaver (JML) workflows and automated provisioning processes
• Identity Governance: Establish access request and approval workflows with appropriate segregation of duties (SoD) controls
• Identity Governance: Create and maintain identity lifecycle management policies
• Integration & Development: Build and maintain integrations between SailPoint and target applications (Active Directory, Azure AD/Entra ID, Microsoft 365, SAP, ServiceNow, HR systems)
• Integration & Development: Develop custom connectors and APIs for applications without out-of-the-box support
• Integration & Development: Write and maintain SQL queries for reporting and data extraction
• Integration & Development: Implement REST/SOAP web services integrations
• Integration & Development: Create PowerShell and shell scripts for automation tasks
• Integration & Development: Collaborate on hybrid identity solutions spanning on-premises and cloud environments
• Compliance & Reporting: Design and generate compliance reports for audits (SOX, GDPR, ISO 27001, etc.)
• Compliance & Reporting: Configure policy violations and remediation workflows
• Compliance & Reporting: Support internal and external audit requirements
• Compliance & Reporting: Maintain documentation of IAM processes and configurations
• Support & Troubleshooting: Provide Level 2/3 support for SailPoint platform issues
• Support & Troubleshooting: Troubleshoot provisioning failures, certification issues, and integration problems
• Support & Troubleshooting: Analyze logs and perform root cause analysis for incidents
• Support & Troubleshooting: Work with SailPoint support on complex technical issues

About You

Technical Skills:

• 3-5+ years of hands-on experience with SailPoint IdentityIQ or IdentityNow
• Strong understanding of IAM concepts: provisioning, deprovisioning, RBAC, access certifications, SoD
• Proficiency in Java, BeanShell, and XML for SailPoint customizations
• Experience with connector development and application integrations
• Knowledge of directory services (Active Directory, LDAP)
• SQL database experience (Oracle, MySQL, MS SQL Server)
• Understanding of authentication protocols (SAML, OAuth, OIDC, Kerberos)
• Scripting skills (PowerShell, Python, Bash)

DesirableSkills:

• SailPoint IdentityIQ Engineer or IdentityNow Engineer certification
• Experience with SailPoint deployment in cloud environments (AWS, Azure)
• Knowledge of other IAM tools (Okta, CyberArk, ForgeRock)
• Experience with containerization (Docker, Kubernetes)
• Familiarity with ITIL processes and ServiceNow integration
• Understanding of compliance frameworks (SOX, PCI-DSS, HIPAA, GDPR)
• Experience with API management and microservices architecture

Nice to Have - Microsoft Technologies

We work extensively with Microsoft technologies, and experience in any of these areas would be a significant advantage:

Microsoft Identity & Security

• Microsoft Entra ID (Azure AD) administration and integration
• Microsoft Entra ID Governance (access reviews, entitlement management, privileged identity management)
• Azure AD Connect and hybrid identity scenarios
• Microsoft Entra Permissions Management
• Conditional Access policies and identity protection
• Microsoft Defender suite (Defender for Identity, Defender for Endpoint, Defender for Cloud Apps)

Microsoft Cloud & Collaboration

• Microsoft 365 administration and security (Exchange Online, SharePoint, Teams)
• Azure platform services and Azure Resource Manager
• Microsoft Graph API development
• Microsoft Purview (information protection, DLP, compliance)
• Power Platform (Power Automate, Power Apps) for workflow automation

Microsoft Infrastructure & Development

• Windows Server and Group Policy management
• Active Directory Certificate Services (ADCS)
• Microsoft SQL Server database administration
• .NET development (C#) for custom integrations
• Azure DevOps for CI/CD pipelines
• Microsoft Intune for endpoint management

Security & Compliance

• Microsoft Sentinel (SIEM) integration and log analytics
• Microsoft Security Copilot
• Microsoft Secure Score optimization
• Microsoft compliance frameworks and certifications

About Us

We are a business and technology consultancy and one of the UK's leading employers, recruiting the brightest talent to become the innovators of tomorrow. We have centres across Europe, North America and Asia-Pacific, and a global workforce of over 2,500 Consultants. FDM has shown exponential growth throughout the years, firmly establishing itself as an award-winning employer and is listed on the FTSE4Good Index.

Diversity and Inclusion

FDM Group is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, national origin, age, disability, veteran status or any other status protected by federal, provincial or local laws.

Why join us

• Career coaching, mentoring and access to upskilling throughout your entire FDM career
• Assignments with global companies and opportunities to work abroad
• Opportunity to re-skill and up-skill into new areas, develop non-linear career paths and build a skillset within your field
• Annual leave, work-place pension