SailPoint Developer & SME

Licensed sponsor Watford Full-time Posted 3 days ago

Role: SailPoint Developer & SME

Job Type: Permanent

Location: Watford, United Kingdom

Working Hours: 40 hours per week (Full-time) Hybrid

Careers at TCS: It means more

TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.

Your responsibilities:

Technical Architect Responsibilities

Define end-to-end identity integration architecture for merger program.
Lead migration and coexistence strategy between Identity IQ and SailPoint ISC.
Design target-state IAM architecture aligned with enterprise security standards and provide architecture governance and technical oversight to engineering teams.
Lead consolidation of multiple identity sources into ISC and design identity profiles, transforms, workflows, policies and governance controls.
Ensure alignment with GDPR, ISO27001, SOX and design governance reporting and audit ready controls.
Review and approve technical designs and deployment plans and mentor SailPoint engineers and developers.
Support troubleshooting of complex integration and provisioning issues.
Provide technical leadership for solution design, integration, and deployment across SailPoint ISC platform.
Collaborate with stakeholders to translate business requirements into secure, scalable technical solutions.
Assess the current IAM landscape assessment and define the target-state ISC architecture.
Architect identity consolidation across merged identities and own technical migration strategy and execution guidance.

SailPoint ISC Development

Design, develop, and implement SailPoint ISC solutions to meet business and security requirements.
Configure and manage Identity Profiles, Sources and Authoritative Systems, Access Profiles, Roles and Entitlements, Lifecycle States, Access Requests, Certifications, Policies and Governance Controls, Workflows and Event Triggers, Transformations and Rules
Develop and maintain custom integrations using REST APIs, SCIM, JDBC, Web Services, and SailPoint connectivity frameworks.
Build and support provisioning and de-provisioning workflows for enterprise applications.

Application Onboarding & Integration

Lead end-to-end application onboarding activities.
Perform account aggregation, entitlement correlation, and identity mapping.
Integrate SailPoint with Active Directory, Microsoft Entra ID, HR systems (Workday, SAP SuccessFactors), Cloud platforms (Azure, AWS), Enterprise and SaaS applications
Collaborate with application owners for connector configuration, testing, and deployment.

Access Governance & Compliance

Implement Role-Based Access Control (RBAC) models.
Configure Segregation of Duties (SoD) controls and access policies.
Manage certification campaigns and access reviews.
Support audit, risk, and compliance requirements for GDPR, SOX, and ISO 27001.
Develop governance dashboards and compliance reporting.

Platform Support & Operations

Provide L3 technical support for SailPoint ISC production environments.
Troubleshoot complex provisioning, aggregation, certification, and workflow issues.
Conduct root cause analysis and corrective action planning.
Participate in release management, change management, and platform upgrades.
Optimize SailPoint platform performance and operational stability.

Technical Leadership & SME Responsibilities

Serve as the SailPoint SME for project and operational initiatives.
Define SailPoint development standards, best practices, and governance models.
Review solution designs and provide technical recommendations.
Mentor junior developers and support teams.
Engage with business stakeholders to translate requirements into secure IAM solutions.
Drive architecture discussions and support strategic IAM transformation programs.

Your Profile

Essential skills/knowledge/experience:

SailPoint Expertise

Extensive IAM experience.
Strong hands-on SailPoint experience.
Strong hands-on expertise in SailPoint Identity Security Cloud (ISC), SailPoint IdentityIQ (IIQ) (preferred), Identity Governance & Administration (IGA), Access Certification, Identity Lifecycle Management, Role Mining and RBAC, Access Request Management, Provisioning and De-provisioning

Technical Skills

REST API integration and Web Services development.
JSON, XML, OAuth, SAML, SCIM.
Java and BeanShell scripting knowledge.
Active Directory, LDAP, and Microsoft Entra ID.
SQL and database connectivity.
Azure and AWS identity integration experience.
Familiarity with SailPoint Virtual Appliance (VA), networking, firewall, and proxy concepts.

Governance & Security Knowledge

Segregation of Duties (SoD)
Joiner-Mover-Leaver (JML) processes
Identity Governance Frameworks
Privileged Access integration concepts
Audit and regulatory compliance controls

Desirable skills/knowledge/experience

Strong knowledge of SailPoint IIQ and SailPoint ISC.
Good understanding of SaaS architecture, SailPoint VAs, Networking, Firewall and proxy concepts.
Proficiency in security protocols, identity lifecycle management and access governance.
Experience with migration planning, cutover activities and technical architecture leadership.
Hands on SailPoint architecture experience.
Strong experience with SailPoint ISC, SailPoint Identity IQ and knowledge of cloud platforms like AWS, Azure
Strong understanding of Identity Governance, Access Management, RBAC, JML Processes, SoD controls.
Experience integrating Active Directory, HR systems, cloud applications and API integration knowledge.
Experience with SailPoint workflows, Transforms, Rules, Certifications, Access Requests and Lifecycle management.
Excellent stakeholder management and communication skills.
Ability to lead onsite engagements and coordinate with distributed teams.
Target IAM architecture for post-merger organization and IIQ to ISC migration roadmap.
Governance and compliance framework.
RBAC model, Cutover and transition plans.
Operational support model.
Strong problem-solving and analytical skills.
Ability to work under pressure and manage multiple priorities.
Excellent interpersonal and presentation skills.

Certifications (Preferred)

SailPoint certifications.
SailPoint Certified Identity Security Cloud Engineer.
SailPoint Architect certification.

Rewards & Benefits

TCS is consistently voted as a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network.

We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon.

Diversity, Inclusion and Wellbeing

Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998.

We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role.

As a Disability Confident Employer, we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role. Please email us at UKI.recruitment@tcs.com if you would like to opt in.

If you are an applicant who needs any adjustments to the application process or interview, please contact us at UKI.recruitment@tcs.com with the subject line: “Adjustment Request” or call TCS London Office 02031552100 / +44 204 520 2575 to request an adjustment. We welcome requests prior to you completing the application and at any stage of the recruitment process.

Beware of Fraudulent offers

This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail, Yahoo Mail, and so on. TCS has not authorised any third-party company to collect money on their behalf. As a vigilant job seeker, beware of fraudulent recruitment activity and protect your interests! You can write to UKI.recruitment@tcs.com to report any fraudulent activity.

Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.

Join us and do more of what matters. Apply online now.