KPMG Spain seeks a Senior SailPoint Identity Security Cloud Consultant to spearhead the implementation and evolution of Identity Governance and Administration (IGA) capabilities. You will be responsible for designing secure identity architectures and ensuring robust governance processes within our client environments.
What You'll Do
- Analyze and define IGA requirements with business, security, and IT stakeholders.
- Translate identity and access management needs into functional and technical designs on SailPoint ISC.
- Design digital identity architecture and role modeling (RBAC/ABAC).
- Onboard applications, add connectors, aggregate accounts/attributes, and configure the privilege catalog.
- Configure and optimize Lifecycle Management, Access Request, and Password Management.
- Define and execute Access Certification campaigns, periodic recertification, and remediation.
- Implement Segregation of Duties (SoD) policies and compliance controls.
- Coordinate with Risk/Compliance teams and generate regulatory reports.
- Automate integrations with directories and ticketing systems (e.g., ServiceNow, Jira).
- Lead production deployment: comprehensive testing, change management, hardening, and initial operation.
- Establish IGA KPIs and create control dashboards.
- Develop documentation and train support teams and end-users.
- Manage stakeholders and project plans (scope, risks, dependencies).
- Mentor junior profiles and contribute to internal libraries (onboarding patterns, reusable policies).
What We're Looking For
- +3 years of experience working with SailPoint Identity Security Cloud (ISC) on IGA implementation/evolution projects.
- Experience in application onboarding and connectors (AD/Azure AD, SCIM/REST, LDAP, SAP, Workday, ServiceNow).
- Experience configuring certification campaigns.
- Solid knowledge of JML, RBAC/ABAC, SoD, identity governance, and compliance.
- Technical English.
Nice to Have
- Experience with Saviynt.
- Broad knowledge of Digital Identity.
Technical Stack
- SailPoint Identity Security Cloud (ISC)
- AD/Azure AD, SCIM/REST, LDAP, SAP, Workday
- ServiceNow, Jira
Work Mode
This role follows a hybrid work model and is based in Madrid.
KPMG is an equal opportunity employer.
