Senior SailPoint IdentityIQ Engineer (m/f/d)

About the role

We are looking for a Senior SailPoint IdentityIQ Engineer (m/f/d) to join Cognizant and help design and deliver enterprise-scale Identity Governance and Administration (IGA) solutions.

In this senior hands-on role, you will develop and integrate SailPoint IdentityIQ solutions across identity lifecycle management, access governance, Joiner-Mover-Leaver (JML) processes and compliance controls. You will work closely with IAM architects, security teams and application owners in an international environment.

Your responsibilities

• Design, develop and enhance SailPoint IdentityIQ (IIQ) solutions, including workflows, rules, forms, policies and certifications.

• Build integrations with Active Directory, Azure AD, LDAP, databases, HR systems and SaaS applications using standard connectors, REST/SOAP APIs and custom provisioning.

• Implement and optimise JML, access requests, approvals, provisioning, roles and entitlement management.

• Configure access governance capabilities including certifications, SoD controls, policy violations and reporting.

• Develop custom Java/BeanShell rules and workflows and troubleshoot complex IIQ issues.

• Take ownership across technical design, development, testing, deployment and production support.

• Support upgrades, patching and environment migrations.

• Contribute to code quality, documentation, CI/CD, performance optimisation and root-cause analysis.

• Collaborate with global IAM, cybersecurity, infrastructure and application teams.

What you bring

• 8+ years of IT/IAM experience, with substantial hands-on SailPoint IdentityIQ development and implementation experience.

• Strong knowledge of IIQ LCM, workflows, rules, provisioning, roles, certifications and policies.

• Hands-on development experience with Java and/or BeanShell.

• Integration experience using REST/SOAP, JDBC/SQL, LDAP and Active Directory.

• Strong understanding of IAM/IGA, RBAC/ABAC, JML, SoD and least-privilege principles.

• Experience with Git and CI/CD tooling, such as Jenkins or Azure DevOps.

• Strong troubleshooting, analytical and communication skills.

• Ability to translate requirements into technical solutions and independently own delivery.

Nice to have

• SailPoint IdentityIQ or other relevant IAM/IGA certification.

• Experience with SailPoint IdentityNow, Saviynt, Okta IGA or PAM solutions.

• Cloud identity experience with Azure AD, AWS or Google Workspace.

• Knowledge of SOX, ISO 27001 and GDPR controls.

• Experience with DevSecOps, automated testing or ServiceNow.