Senior SailPoint IdentityIQ Engineer (m/f/d)

About the role

We are looking for a Senior SailPoint IdentityIQ Engineer (m/f/d) to join Cognizant and help design and deliver enterprise-scale Identity Governance and Administration (IGA) solutions.

In this senior hands-on role, you will develop and integrate SailPoint IdentityIQ solutions across identity lifecycle management, access governance, Joiner-Mover-Leaver (JML) processes and compliance controls. You will work closely with IAM architects, security teams and application owners in an international environment.

Your responsibilities

• Design, develop and enhance SailPoint IdentityIQ (IIQ) solutions, including workflows, rules, forms, policies and certifications.
• Build integrations with Active Directory, Azure AD, LDAP, databases, HR systems and SaaS applications using standard connectors, REST/SOAP APIs and custom provisioning.
• Implement and optimise JML, access requests, approvals, provisioning, roles and entitlement management .
• Configure access governance capabilities including certifications, SoD controls, policy violations and reporting .
• Develop custom Java/BeanShell rules and workflows and troubleshoot complex IIQ issues.
• Take ownership across technical design, development, testing, deployment and production support.
• Support upgrades, patching and environment migrations.
• Contribute to code quality, documentation, CI/CD, performance optimisation and root-cause analysis.
• Collaborate with global IAM, cybersecurity, infrastructure and application teams.

What you bring

• 8+ years of IT/IAM experience , with substantial hands‑on SailPoint IdentityIQ development and implementation experience.
• Strong knowledge of IIQ LCM, workflows, rules, provisioning, roles, certifications and policies .
• Hands‑on development experience with Java and/or BeanShell .
• Integration experience using REST/SOAP, JDBC/SQL, LDAP and Active Directory .
• Strong understanding of IAM/IGA, RBAC/ABAC, JML, SoD and least‑privilege principles .
• Experience with Git and CI/CD tooling , such as Jenkins or Azure DevOps.
• Strong troubleshooting, analytical and communication skills.
• Ability to translate requirements into technical solutions and independently own delivery.

Nice to have

• SailPoint IdentityIQ or other relevant IAM/IGA certification .
• Experience with SailPoint IdentityNow, Saviynt, Okta IGA or PAM solutions .
• Cloud identity experience with Azure AD, AWS or Google Workspace .
• Knowledge of SOX, ISO 27001 and GDPR controls.
• Experience with DevSecOps, automated testing or ServiceNow.