IAM ENGINEER

One of my clients is looking for a skilled IAM Engineer with strong SailPoint expertise to join a 12-month freelance engagement, with a high probability of extension as part of a long-term (3-year) programme. This role offers the chance to play a key part in the delivery and operation of large-scale identity and access management solutions within a modern, international organisation. Key Responsibilities Deliver, support, and evolve IAM solutions built on SailPoint IdentityIQ and/or SailPoint IdentityNow (Identity Security Cloud). Configure and tailor IAM functionality covering identity lifecycle processes, access requests, certifications, role models, and access policies. Integrate SailPoint with enterprise systems, cloud services, directories, and HR platforms, ensuring reliable and secure identity provisioning. Build and maintain workflows, rules, connectors, and provisioning processes to enable efficient joiner, mover, and leaver automation. Design, improve, and maintain RBAC frameworks and entitlement structures in line with business needs and security controls. Investigate and resolve IAM-related issues, conduct root cause analysis, and maintain platform performance and compliance. Work closely with security, infrastructure, application, and architecture teams to ensure IAM solutions align with organisational standards. Support continuous improvement through documentation, best practices, and process optimisation. Requirements Proven experience in an IAM Engineer role with hands-on exposure to SailPoint IdentityIQ and/or IdentityNow. Strong knowledge of IAM fundamentals, including identity lifecycle management, access governance, RBAC, SoD, authentication, and authorisation. Experience integrating IAM platforms across hybrid environments, including on-premise systems and cloud services (e.g. AD, Azure AD, LDAP, SaaS). Comfortable operating in large-scale, complex enterprise environments with diverse stakeholders. Excellent communication skills, with the ability to clearly articulate IAM concepts to both technical and non-technical audiences. Scripting or development experience (e.g. Beanshell, Java, JavaScript) is beneficial but not a primary requirement. What’s Offered 12-month freelance contract with strong likelihood of extension on a long-term programme. Involvement in global IAM initiatives leveraging modern identity and security technologies. Supportive, collaborative environment working alongside experienced engineering and security teams. Highly competitive daily rate, dependent on experience.