Senior SailPoint IdentityIQ Engineer (m/f/d)

About the role We are looking for a Senior SailPoint IdentityIQ Engineer (m/f/d) to join Cognizant and help design and deliver enterprise-scale Identity Governance and Administration (IGA) solutions. In this senior hands-on role, you will develop and integrate SailPoint IdentityIQ solutions across identity lifecycle management, access governance, Joiner-Mover-Leaver (JML) processes and compliance controls. You will work closely with IAM architects, security teams and application owners in an international environment.

Your responsibilities Design, develop and enhance SailPoint IdentityIQ (IIQ) solutions, including workflows, rules, forms, policies and certifications. Build integrations with Active Directory, Azure AD, LDAP, databases, HR systems and SaaS applications using standard connectors, REST/SOAP APIs and custom provisioning. Implement and optimise JML, access requests, approvals, provisioning, roles and entitlement management .

Configure access governance capabilities including certifications, SoD controls, policy violations and reporting . Develop custom Java/BeanShell rules and workflows and troubleshoot complex IIQ issues. Take ownership across technical design, development, testing, deployment and production support. Support upgrades, patching and environment migrations. Contribute to code quality, documentation, CI/CD, performance optimisation and root-cause analysis.

Collaborate with global IAM, cybersecurity, infrastructure and application teams. What you bring 8+ years of IT/IAM experience , with substantial hands-on SailPoint IdentityIQ development and implementation experience. Strong knowledge of IIQ LCM, workflows, rules, provisioning, roles, certifications and policies . Hands-on development experience with Java and/or BeanShell . Integration experience using REST/SOAP, JDBC/SQL, LDAP and Active Directory .

Strong understanding of IAM/IGA, RBAC/ABAC, JML, SoD and least-privilege principles . Experience with Git and CI/CD tooling , such as Jenkins or Azure DevOps. Strong troubleshooting, analytical and communication skills. Ability to translate requirements into technical solutions and independently own delivery. Nice to have SailPoint IdentityIQ or other relevant IAM/IGA certification . Experience with SailPoint IdentityNow, Saviynt, Okta IGA or PAM solutions .

Cloud identity experience with Azure AD, AWS or Google Workspace . Knowledge of SOX, ISO 27001 and GDPR controls. Experience with DevSecOps, automated testing or ServiceNow.