Sr. SailPoint Engineer

Role: Senior SailPoint Engineer Identity Security Cloud (ISC)

Experience: 6 Yrs - 12 Yrs

Location: Gurugram/Hyderabad

Key Accountabilities (Aligned to Senior Specialist Expectations):

Operational & Technical Ownership (Handson):

• Own the day-to-day engineering and configuration of SailPoint Identity Security Cloud (ISC), including:
• JoinerMover–Leaver (JML) processes
• Access Requests & Approvals
• Identity Profiles, Lifecycle States, and Correlation Rules
• Access Profiles, Roles, Entitlements, and Certifications
• Execute hands-on integrations using SCIM, REST APIs, and SailPoint connectors.
• Configure and maintain SoD policies, RBAC, ABAC, and least-privilege controls.
• Ensure operational stability, scalability, and performance of the ISC tenant.

Secure Access & Controls (Enterprise Scope):

• Engineer and support CyberArk PAM solutions across infrastructure and applications.
• Integrate IGA and PAM platforms with:
• Azure AD / Entra ID
• AWS IAM
• Onprem and SaaS enterprise systems
• Enforce Carlsberg’s global access governance standards across regions and business units.

Governance, Risk & Compliance:

• Execute and support access certifications, audit evidence production, and remediation.
• Ensure compliance with SOX, GDPR, ISO 27001, NIST, and internal control requirements.
• Partner with Group Internal Audit and Internal Control during assessments and audits.
• Translate control objectives into practical, enforceable technical configurations.

Continuous Improvement & Automation:

• Automate identity lifecycle and governance workflows using:
• PowerShell
• Python
• SailPoint rules / scripting
• Identify technical debt, inefficiencies, and control gaps; propose improvement initiatives.
• Contribute to global IAM roadmaps and architectural standards.

Decision Authority (Senior Specialist Level):

• Technical design and configuration decisions within ISC and PAM platforms
• Selection and implementation of integration patterns and automation approaches
• Recommendations impacting global IAM standards and controls

Required Qualifications & Experience:

• 5+ years of hands-on IGA experience with strong focus on SailPoint Identity Security Cloud (ISC).
• Proven experience in:
• ISC configuration and lifecycle management
• Roles, access profiles, entitlements, and certifications
• SCIM, SAML, OAuth, REST APIs, LDAP
• Strong understanding of:
• Identity lifecycle management
• RBAC, ABAC, SoD, least privilege
• Experience working in regulated enterprise environments.

Certifications:

• SailPoint Identity Security Cloud Certification
• CyberArk Defender
• CISSP, CISM, or CISA