IAM Solution Architect (SailPoint IdentityIQ) - Riyadh, KSA

About this task

Lead the architecture, design, and implementation of enterprise Identity and Access Management (IAM) solutions, with a strong focus on SailPoint IdentityIQ (IIQ). Provide technical leadership across complex IAM transformation initiatives, including Identity Governance & Administration (IGA), lifecycle management, and enterprise integrations.

Collaborate with enterprise architects, security teams, infrastructure teams, application owners, and business stakeholders to design scalable, secure, governance-driven IAM solutions aligned with cybersecurity best practices and regulatory requirements.

Key Responsibilities

Solution Architecture
- Design end-to-end IAM architecture using SailPoint IdentityIQ.
- Develop High-Level Design (HLD) and Low-Level Design (LLD) documentation.
- Define IAM target architecture, integration patterns, and implementation roadmaps.
- Review and approve IAM technical designs and solution proposals.
- Lead architecture governance and design review sessions.

Identity Governance
- Design Joiner-Mover-Leaver (JML) lifecycle processes.
- Design Role-Based Access Control (RBAC) models and role engineering strategies.
- Implement governance controls covering access certification, access requests, policy management, Segregation of Duties (SoD), RBAC, birthright access, and delegated administration.
- Design Identity Governance operating models.

SailPoint Solution Leadership
- Lead SailPoint IIQ implementation and enhancement projects.
- Define application onboarding strategies.
- Design connector architecture for enterprise applications.
- Lead performance optimization and scalability planning.
- Review SailPoint customizations and integrations.

Integration & Security
- Architect integrations with Active Directory & Exchange, SAP, Oracle, ServiceNow, in-house applications, REST/SOAP APIs, LDAP, and HR systems.
- Design secure authentication and federation architectures using SAML, OAuth2, OpenID Connect, and SCIM.

Requirements
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- 7+ years of experience in Identity and Access Management.
- 3+ years designing enterprise IAM and Zero Trust Architecture.
- Extensive experience with SailPoint IdentityIQ.
- Strong understanding of Identity Governance & Administration.
- Experience designing enterprise IAM solutions.
- Strong documentation and presentation skills.

Preferred Certifications
- SailPoint IdentityIQ Engineer/Architect, CISSP, TOGAF, or ITIL.