Access Engineer

FDM is a global business and technology consultancy seeking an experienced SailPoint Engineer to design, implement, and maintain their Identity and Access Management (IAM) infrastructure. This is initially an 8 month contract with the potential to extend and will be a hybrid role based in Leeds. The ideal candidate will have deep expertise in SailPoint platforms and a strong understanding of identity governance and administration principles. Experience with the broader Microsoft identity and security ecosystem is highly valued as our client continues to integrate IAM solutions across their technology stack. Responsibilities: Platform Management • Design, develop, and maintain SailPoint IdentityIQ/IdentityNow implementations • Configure and customize workflows, lifecycle events, provisioning policies, and certification campaigns • Develop and maintain application integrations using connectors (JDBC, SCIM, web services, flat files) • Create and optimize custom rules, workflows, and forms using BeanShell, Java, and XML • Perform platform upgrades, patches, and performance tuning Identity Governance • Implement and manage role-based access control (RBAC) models and role mining initiatives • Configure and execute access certification campaigns for compliance requirements • Develop and maintain joiner/mover/leaver (JML) workflows and automated provisioning processes • Establish access request and approval workflows with appropriate segregation of duties (SoD) controls • Create and maintain identity lifecycle management policies Integration & Development • Build and maintain integrations between SailPoint and target applications (Active Directory, Azure AD/Entra ID, Microsoft 365, SAP, ServiceNow, HR systems) • Develop custom connectors and APIs for applications without out-of-the-box support • Write and maintain SQL queries for reporting and data extraction • Implement REST/SOAP web services integrations • Create PowerShell and shell scripts for automation tasks • Collaborate on hybrid identity solutions spanning on-premises and cloud environments Compliance & Reporting • Design and generate compliance reports for audits (SOX, GDPR, ISO 27001, etc.) • Configure policy violations and remediation workflows • Support internal and external audit requirements • Maintain documentation of IAM processes and configurations Support & Troubleshooting • Provide Level 2/3 support for SailPoint platform issues • Troubleshoot provisioning failures, certification issues, and integration problems • Analyze logs and perform root cause analysis for incidents • Work with SailPoint support on complex technical issues About You Technical Skills: • 3-5+ years of hands-on experience with SailPoint IdentityIQ or IdentityNow • Strong understanding of IAM concepts: provisioning, deprovisioning, RBAC, access certifications, SoD • Proficiency in Java, BeanShell, and XML for SailPoint customizations • Experience with connector development and application integrations • Knowledge of directory services (Active Directory, LDAP) • SQL database experience (Oracle, MySQL, MS SQL Server) • Understanding of authentication protocols (SAML, OAuth, OIDC, Kerberos) • Scripting skills (PowerShell, Python, Bash) Desirable Skills: • SailPoint IdentityIQ Engineer or IdentityNow Engineer certification • Experience with SailPoint deployment in cloud environments (AWS, Azure) • Knowledge of other IAM tools (Okta, CyberArk, ForgeRock) • Experience with containerization (Docker, Kubernetes) • Familiarity with ITIL processes and ServiceNow integration • Understanding of compliance frameworks (SOX, PCI-DSS, HIPAA, GDPR) • Experience with API management and microservices architecture Nice to Have - Microsoft Technologies We work extensively with Microsoft technologies, and experience in any of these areas would be a significant advantage: Microsoft Identity & Security • Microsoft Entra ID (Azure AD) administration and integration • Microsoft Entra ID Governance (access reviews, entitlement management, privileged identity management) • Azure AD Connect and hybrid identity scenarios • Microsoft Entra Permissions Management • Conditional Access policies and identity protection • Microsoft Defender suite (Defender for Identity, Defender for Endpoint, Defender for Cloud Apps) Microsoft Cloud & Collaboration • Microsoft 365 administration and security (Exchange Online, SharePoint, Teams) • Azure platform services and Azure Resource Manager • Microsoft Graph API development • Microsoft Purview (information protection, DLP, compliance) • Power Platform (Power Automate, Power Apps) for workflow automation Microsoft Infrastructure & Development • Windows Server and Group Policy management • Active Directory Certificate Services (ADCS) • Microsoft SQL Server database administration • .NET development (C#) for custom integrations • Azure DevOps for CI/CD pipelines • Microsoft Intune for endpoint management Security & Compliance • Microsoft Sentinel (SIEM) integration and log analytics • Microsoft Security Copilot • Microsoft Secure Score optimization • Microsoft compliance frameworks and certifications About Us We are a business and technology consultancy and one of the UK's leading employers, recruiting the brightest talent to become the innovators of tomorrow. We have centres across Europe, North America and Asia-Pacific, and a global workforce of over 2,500 Consultants. FDM has shown exponential growth throughout the years, firmly establishing itself as an award-winning employer and is listed on the FTSE4Good Index. Diversity and Inclusion FDM Group is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, national origin, age, disability, veteran status or any other status protected by federal, provincial or local laws. Why join us • Career coaching, mentoring and access to upskilling throughout your entire FDM career • Assignments with global companies and opportunities to work abroad • Opportunity to re-skill and up-skill into new areas, develop non-linear career paths and build a skillset within your field • Annual leave, work-place pension