Role Overview

The Identity and Access Management team is responsible for identity governance across the organization, including Joiner, Mover, and Leaver (JML) lifecycle management, access provisioning and deprovisioning, regulatory recertification, and the ongoing implementation of SailPoint IdentityNow (SaaS) as the firm's Identity Governance and Administration (IGA) platform.

This hybrid role spans BAU operations and project delivery. You will maintain day-to-day IAM services while contributing to the design, build, and rollout of SailPoint SaaS, including application onboarding, connector configuration, workflow design, and role modeling. Experience in financial services or a similarly regulated environment is essential due to audit rigor and regulatory expectations.

Responsibilities

BAU Operations

Ensure Joiner, Mover, and Leaver processes are executed in line with company policies, ensuring all access changes are auditable and traceable.
Manage access requirements for internal and external users across internal and third-party applications.
Create and manage access review campaigns within SailPoint, including preparation, testing, launch, business liaison, and remediation.
Manage the IAM support queue, team mailbox, and Slack channel, providing timely and high-quality responses.
Monitor SailPoint jobs and processes daily, triaging and resolving issues proactively.
Support internal and external audits by gathering evidence and preparing responses.

Project Delivery & Continuous Improvement

Contribute to the SailPoint SaaS implementation program: onboarding applications, defining connectors, building workflows, and testing configurations.
Collaborate with business stakeholders to define and implement role-based access control (RBAC) models.
Write and maintain Python scripts for data transformation, reporting, and process automation (e.g., CSV manipulation, API calls, reconciliation checks).
Build and consume REST API integrations between SailPoint, Active Directory, HR systems (Workday), and third-party applications.
Identify and implement process improvements with a focus on automation.
Explore and adopt automation and emerging AI tooling to reduce manual effort.
Contribute to team documentation, knowledge sharing, and operational runbooks.

Requirements

3 to 8 years of experience in Identity and Access Management within financial services or a similarly regulated environment.
Hands-on experience with an IGA platform (SailPoint IdentityNow preferred; SailPoint IIQ, Saviynt, or similar accepted).
Experience with user access reviews and recertification campaigns.
Proficiency working with data and technology beyond Excel, including Python scripting for automation, REST APIs, and reconciling large datasets.
Active Directory administration experience.
Experience with application onboarding to an IGA platform, including access analysis, entitlement modeling, and connector configuration.
Strong communication skills with the ability to engage both technical teams and senior business stakeholders.
A problem-solving mindset with a focus on process optimization.

Preferred Qualifications

Experience working on an IGA implementation or migration project.
Familiarity with SailPoint SaaS (ISC) APIs, transforms, and workflow builder.
Experience with ServiceNow, JIRA, or similar ITSM/workflow tools.
Interest in leveraging AI/ML tools for process automation.

Benefits

Employees have access to a comprehensive benefits package designed to support professional development and work-life balance. Key offerings include:

Competitive holiday entitlements and flexible working arrangements.
Two annual paid leave days for community volunteering.
Pension/401k plans, life and long-term disability coverage, and group sick pay.
Enhanced parental leave and long-service leave.
Location-dependent benefits such as private medical coverage, discounted gym memberships, and pet insurance.

IAM Analyst