SailPoint Operations Engineer

Description

Location: Warsaw, Plant & Go.

The company makes consumer brands sold worldwide and runs operations in about 70 countries. You will join the Information Security Identity and Access Management organization as a full-time SailPoint Operations Engineer.

Your main task is advanced operational support for SailPoint and itAccess identity governance and administration services. Experience with PAM, directory services and Ping is desirable but not required, and it helps you work across the wider IAM landscape.

You will work with IAM Engineering, PAM owners, service management, ServiceNow and Help Desk teams, security operations, executive admin teams and business users to fix issues, raise service quality, tighten operational controls and grow a horizontal IAM operations model.

A core goal is 'onboard once, govern everywhere': shared identity, ownership, entitlement and privileged-access data across IGA and PAM, so customers are not asked to repeat onboarding and data collection for each control plane.

This is a hands-on operations role, not a full development role. Scripting, BeanShell and Java knowledge is preferred for troubleshooting and configuration analysis.

Responsibilities

• Give advanced Level 3 support for SailPoint and itAccess services.
• Diagnose and fix problems with provisioning, identity lifecycle, certifications, entitlements, roles, workflows, policies and data quality.
• Handle complex incidents and problem records for SailPoint IdentityIQ and related IAM processes.
• Guide Tier 2 operations analysts through incidents, problems, changes and escalations.
• Run access reviews, application onboarding and offboarding, lifecycle events, provisioning, role work, rules, reports, password management and routine tasks.
• Work with IAM Engineering on defects, recurring faults, configuration problems, integration gaps and connector issues, aiming to remove root causes.
• Executive care: give direct L3 support to executive admin teams when identity or privileged access problems need close handling. Coordinate updates, escalation and restoration steps while keeping operational controls in place.
• Explain complex IAM and PAM issues in plain business language to admins, service managers, partners and support staff.
• Nice to have: use prior PAM experience to triage and escalate where SailPoint and privileged access meet.
• Nice to have: use directory knowledge of Active Directory, LDAP and cloud directories to handle account, group, sync and provisioning issues.
• Nice to have: use Ping knowledge of authentication, federation and single sign-on when resolving connected incidents.
• Work with platform owners and engineers on issues that span SailPoint and other IAM services. Help share identity data quality and cut duplicate work.
• Support the 'onboard once, govern everywhere' model: reduce repeated onboarding and data requests, check ownership and privileged flags, map entitlements, and spot PAM and IGA overlap from a support view.
• Manage incidents, requests, problems and escalations in ServiceNow or similar tools.
• Lead or support root cause analysis for recurring or high-impact IAM and PAM issues.
• Take part in readiness, testing, validation and execution of IAM changes, including off-hours or weekend work when planned production activities require it.
• Keep incident and escalation updates clear, timely and written in business language.
• Maintain SOPs, runbooks, knowledge articles and support procedures.
• Find recurring patterns and drive corrective actions that reduce ticket volume.
• Support KPIs, service reviews, health checks and performance management.
• Build automation, self-healing and workflow simplification, moving IAM operations from reactive ticket work toward proactive service ownership and less demand.

Requirements

• Strong experience in enterprise IT operations, IAM operations, cybersecurity support or a similar technical support setting.
• Strong hands-on experience supporting SailPoint IdentityIQ, SailPoint Identity Security Cloud or similar enterprise technologies.
• Strong understanding of IAM concepts: identity lifecycle, access provisioning, access reviews, entitlements, roles, workflows, policy violations and ownership models.
• Experience with ITIL-based incident, problem, change and escalation management.
• Experience with ServiceNow or similar ticketing and workflow platforms.
• Strong troubleshooting, analytical and problem-solving skills.
• Ability to coordinate across Service Desk, operations, engineering, service managers, vendors and business stakeholders.
• Strong customer service focus and clear communication with technical and non-technical people.
• Preferred: experience with PAM platforms such as CyberArk, Delinea / Centrify, BeyondTrust or similar.
• Preferred: experience with directory services such as Active Directory, LDAP-based directories, Entra ID or similar.
• Preferred: familiarity with Ping platforms and authentication, federation and single sign-on concepts.
• Preferred: experience with SailPoint IdentityIQ areas such as onboarding and offboarding, certifications, tasks, reports, lifecycle events, workflows, rules, roles, provisioning and password management.
• Preferred: ability to read, understand or troubleshoot Java or BeanShell scripts and SailPoint configuration. Hands-on development is helpful but not required.
• Preferred: familiarity with connectors such as SAP, SAP Java, Oracle, Active Directory, Enterprise Directory or similar.
• Preferred: familiarity with identity data models, entitlement mapping, application ownership, privileged account discovery and governance metadata.
• Preferred: familiarity with Azure, AWS or GCP.
• Preferred: experience with server, database, Linux, Windows Server or middleware operations.
• Preferred: scripting, automation, dashboarding or data analysis skills.
• Preferred: experience using AI-enabled service management, operations or productivity tools for incidents, knowledge management, analytics, scripting and automation ideas.
• Preferred: ITIL Foundation, SailPoint, PAM, cloud or CISSP or cybersecurity certification.

Conditions

Full-time position in the Experienced Professionals segment, job number R000158851.

Location: Warsaw, Plant & Go.

Hybrid model: work from home two days a week and spend the rest of the time in the office.

Employment is offered only under an Umowa o Pracę, a full-time employment contract. Apply only if you accept this.

Off-hours or weekend work may be required for planned production changes.

Equal opportunity: the company does not discriminate on race, colour, gender, age, national origin, religion, sexual orientation, gender identity or expression, marital status, citizenship, disability, HIV/AIDS status or any other legally protected factor.

Benefits

• Large-scale projects and access to world-leading IT partners and technologies from day one.
• Wide range of self-development options, including training and certification paths.
• Competitive starting salary and benefits, including private healthcare, company stock, savings plans and sport cards.
• Regular salary increases and possible promotions based on results and performance.
• Opportunity to change role every few years to find the best fit for you and the company.