Security Admin- Identity access management

Experience Profile 12+ years in Cybersecurity/IAM roles, including a minimum of 5 years of hands-on SailPoint and enterprise Active Directory/Entra ; prior experience in financial services or another highly regulated, multi-country environment is strongly preferred. Role Summary Acts as the dedicated Cybersecurity/IAM counterpart to the Data Governance-led team, translating approved RBAC/ABAC role and coverage definitions into governed SailPoint roles and Active Directory/Entra  groups, and ensuring every entitlement change is provisioned, approved, recertified, and audited through the client's existing identity governance ecosystem.

Key Responsibilities Co-author RBAC/ABAC policy definitions with the Data Governance Architects and Business Analyst, ensuring technical feasibility within SailPoint and AD/Entra n and configure the role-to-group mapping schema between the entitlement taxonomy and Active Directory security groups. Configure SailPoint roles, access request/approval workflows, and recertification campaigns aligned to Smart Approval and Firmwide Certification. Configure Entra , access request/approval workflows, and recertification campaigns aligned to Smart Approval and Firmwide Certification.

Design SailPoint and Entra  campaigns (scope, reviewers, frequency, and escalation rules) aligned to the tri-annual Firmwide Certification cycle. Administer elevated-permission and break-glass access (HR-for-HR, Operating Committee, senior/peer) with documented approval chains. Integrate SailPoint and Entra  and certification events with Splunk for monitoring, alerting, and evidence capture. Support UAT, negative testing, and production cutover for all IAM-layer components. Co-author the IAM sections of the operational runbook and lead related knowledge-transfer sessions.