- Location
- OFNA TECH AND OPER QRO, Mexico
- Type
- Full-time
- Department
- Engineering
- Closing date
- Jun 29, 2026
- Source
- Workday
Description
Key Responsibilities
1. Strategic Leadership & Governance
- Define and execute the IAM/IGA strategy aligned with enterprise cybersecurity and digital transformation objectives.
- Establish governance frameworks for identity lifecycle management, RBAC/ABAC, SoD controls, and certification campaigns.
- Develop and maintain IAM roadmaps, investment plans, and KPIs.
- Drive modernization initiatives including migration to SailPoint IdentityNow (if applicable) and cloud-first identity architecture.
2. SailPoint Platform Ownership
- Provide architectural oversight and engineering leadership for SailPoint (IdentityIQ) and File Access Manager (FAM).
- Ensure platform scalability, resilience, performance tuning, and high availability.
- Lead onboarding of enterprise applications (on-prem, SaaS, cloud, legacy systems).
- Oversee connector configurations, rule development (Beanshell/Java), workflows, and custom integrations.
- Manage role modeling, access policies, and entitlement governance frameworks.
3. Identity Lifecycle & Automation
- Implement automated Joiner-Mover-Leaver (JML) processes.
- Integrate HR systems (e.g., Workday), Active Directory, Azure AD, LDAP, cloud platforms (AWS/Azure/GCP), and business-critical applications.
- Reduce manual provisioning through orchestration and API-driven automation.
- Establish measurable SLAs for provisioning and de-provisioning.
4. Compliance, Risk & Audit
- Ensure alignment with regulatory and compliance frameworks (e.g., SOX, GLBA, PCI-DSS, FFIEC, ISO 27001).
- Lead access certification campaigns and remediation processes.
- Partner with Internal Audit and Risk teams to address findings and improve control maturity.
- Maintain documentation, control evidence, and audit-ready posture.
5. Engineering & Operations Management
- Lead, mentor, and scale a team of IAM engineers and architects.
- Implement DevSecOps practices for SailPoint code deployment and change management.
- Establish operational monitoring, incident response processes, and root cause analysis for IAM services.
- Manage vendor relationships and third-party IAM service providers.
6. Stakeholder Engagement
- Partner with Application Owners and Business Units for secure onboarding and access governance.
- Present IAM metrics and risk posture to senior leadership and governance committees.
- Drive cross-functional alignment on identity standards and best practices.
