Lead Identity Engineer - RBAC; Mining Specialist

About the Role

The IAM RBAC Specialist will play a key role in designing, analysing, and optimizing Role-Based Access Control (RBAC) models within the ecosystem. The role primarily focuses on role mining, entitlement analysis, and RBAC design, working closely with business stakeholders and application owners to define scalable and compliant access models. This is not a tool‑centric engineering role. It requires a strong functional IAM professional with deep expertise in RBAC frameworks and access governance.

• Perform role mining and access analysis to identify patterns and define business roles
• Design, develop, and optimize RBAC models (business roles, technical roles, and hierarchies)
• Work with business teams and application owners to gather access requirements and validate roles
• Analyze entitlements and recommend role consolidation and optimization strategies
• Define and enforce RBAC standards, naming conventions, and governance frameworks
• Ensure RBAC models align with Segregation of Duties (SoD) and compliance requirements
• Support application onboarding by structuring roles and mapping entitlements
• Contribute to access certification and review processes
• Maintain documentation for roles, policies, and RBAC processes
• Collaborate with IAM and security teams to enhance access governance practices
• Identify opportunities to improve existing RBAC models and IAM processes

• 3–6 years of IAM experience with strong focus on:
  • RBAC design and implementation
  • Role mining and entitlement analysis
  • Access governance
• Strong understanding of:
  • RBAC concepts (primary requirement)
  • Segregation of Duties (SoD)
  • Identity Lifecycle (Joiner–Mover–Leaver)
• Proven experience working with:
  • Business stakeholders for role definition
  • Access data analysis and interpretation
• Strong analytical and problem‑solving skills
• Excellent communication and documentation abilities
• Ability to translate business requirements into effective access control models

• Experience with Saviynt or any IGA tools (SailPoint, Oracle, etc.)
• Exposure to access certification and provisioning processes
• Familiarity with Active Directory / Microsoft Entra
• IAM certifications (preferred but not mandatory)

Simeio is an equal opportunity employer.