Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : SailPoint IdentityIQ
Good to have skills : NA
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary:
The SailPoint IIQ Operations Engineer is responsible for the day-to-day administration, monitoring, and support of the IdentityIQ platform. This role ensures platform stability, operational excellence, and timely execution of identity governance processes. While primarily operations-focused, the role also encompasses light scripting, workflow configuration, and connector maintenance to support business continuity and process improvements.
Roles & Responsibilities:
- Administer and monitor the SailPoint IIQ environment across Dev, QA, and Production instances
- Manage scheduled tasks, aggregation jobs, and provisioning queues to ensure timely execution
- Monitor system health, application logs (Tomcat, IIQ), and database performance escalate anomalies
- Perform routine platform maintenance including patch application, certificate renewals, and log rotation
- Manage IIQ application server configurations and support environment refreshes and clones
- Execute and oversee Joiner-Mover-Leaver (JML) processes troubleshoot provisioning failures and stuck workflows
- Process manual access request fulfillment and manage approval queue health
- Remediate failed provisioning events and retry/re-trigger identity refresh tasks
- Support onboarding of new applications into IIQ by coordinating with application owners and the IIQ development team
- Launch, monitor, and close access certification campaigns as per the governance calendar
- Ensure timely completion of certifications follow up with certifiers and escalate non-responses
- Produce compliance and audit evidence reports from IIQ for SOX, HIPAA, GDPR, and PCI-DSS requirements
- Maintain audit trail integrity and support internal/external audit requests with data extracts and logs
- Monitor and maintain existing connectors for Active Directory, LDAP, Azure AD, SAP, Workday, ServiceNow, and flat-file sources
- Troubleshoot connector failures, aggregation errors, and data sync issues coordinate resolution with application teams
- Perform minor connector configuration changes and rule adjustments for attribute mapping and correlation
- Support REST/SOAP API integrations with ITSM and HRMS systems handle feed failures and re-processing
- Make targeted modifications to existing BeanShell rules, workflow steps, and email notification templates
- Configure and tune role assignments, access profiles, and entitlement catalog entries
- Write and maintain basic IIQ task definitions and scheduled reports using the native reporting engine
- Assist the development team with UAT testing, change deployment steps, and post-release validation in production
- Act as the L2 support resource for IAM incidents triage, resolve, or escalate IIQ-related issues per SLA
- Manage the IIQ operations backlog, including service requests for access provisioning, de-provisioning, and modifications
- Document root cause analyses (RCAs) for major incidents and implement preventive measures
- Maintain and update operational runbooks, SOPs, and knowledge base articles
- Generate and distribute regular operational dashboards covering provisioning metrics, certification status, and SoD violations
- Track and report on KPIs such as orphan accounts, access request SLA adherence, and certification completion rates
- Ensure Separation of Duties (SoD) violation reports are reviewed and actioned within agreed timelines
- Support periodic entitlement reviews and role mining exercises alongside the IAM governance team
- Collaborate with HR, IT, and business application owners to resolve access and provisioning queries
- Provide knowledge transfer and guidance to L1 helpdesk teams on common IIQ issues and procedures
- Participate in change advisory board (CAB) reviews for IIQ-related changes
- Coordinate with the SailPoint IIQ development/SME team for complex configuration changes and platform upgrades
Professional & Technical Skills:
- IIQ Modules: LCM, Compliance Manager, Task Management, Role Management, Provisioning
- Light Development: BeanShell (rule modifications), XML, basic workflow configuration
- Directories: Active Directory, LDAP, Azure AD (account management & troubleshooting)
- Connectors: AD, LDAP, flat-file, JDBC familiarity with SAP, Workday, or ServiceNow connectors
- Compliance: SOX, HIPAA, GDPR, PCI-DSS — audit evidence generation and certification ops
- Databases: Basic SQL querying on MySQL, MS SQL, or Oracle for IIQ backend troubleshooting
- Platforms: Linux/Windows server administration, Tomcat log analysis and service management
- ITSM: ServiceNow or equivalent — incident, request, and change management workflows
- SailPoint Certified IdentityIQ Engineer certification
- Exposure to SailPoint IdentityNow (cloud) or IIQ-to-IDN migration activities
- Familiarity with CyberArk, BeyondTrust, or other PAM tools for privileged account oversight
- Experience with CI/CD pipelines for IIQ configuration deployments
- ITIL Foundation certification
- Exposure to Zero Trust architecture and least-privilege access principles
- Experience supporting large-scale environments with 10,000+ identities
Additional Information:
- The candidate should have minimum 7-8 years in IAM operations, with 6-7 years hands-on SailPoint IIQ administration
- This position is based at our Bengaluru office.
- A 15 years full time education is required.
Bengaluru
Énoncé sur l’égalité d’accès à l’emploi, Demandes d’accommodement et Autres énoncés en matière d’emploi
Notre engagement envers l’inclusion et la diversité
Chez Accenture, l’inclusion et la diversité sont essentielles à notre culture et font partie intégrante de nos valeurs fondamentales. Nous sommes engagés à créer un environnement où nos employés sont à l’aise, sont eux-mêmes et contribuent. À l’image du Canada, le personnel d’Accenture est composé d’une très grande variété de cultures, d’origines ethniques, de croyances, d’expériences et de langues. Nous offrons un environnement inclusif, sans égard aux caractéristiques personnelles comme l’origine ethnique, la religion, le genre, l’orientation sexuelle, l’identité ou l’expression du genre, l’âge ou le handicap.
Demandes d’accommodement
Accenture s’engage à offrir l’égalité d’accès à l’emploi aux personnes handicapées ou pratiquant une religion, notamment en offrant les accommodements raisonnables nécessaires. Si vous êtes embauché par Accenture et que vous avez besoin d’accommodements pour remplir les fonctions essentielles de votre rôle, vous serez invité à participer à notre processus d’accommodement raisonnable. Les accommodements consentis pour faciliter le processus de recrutement ne sont pas une garantie d’accommodements futurs ou continus après l’embauche.
Si vous souhaitez être pris en considération pour un emploi chez Accenture, et que vous avez besoin d’accommodements pour un handicap ou une pratique religieuse, veuillez nous appeler sans frais au 1-877-889‑9009, envoyez-nous un courriel ou communiquez avec le service de recrutement.
Autres énoncés en matière d’emploi
Nous avons pour objectif d’offrir à notre personnel des postes à proximité de leur lieu de résidence. Cependant, étant donné la nature de nos activités et nos obligations envers nos clients, nos employés doivent être prêts à voyager au besoin.
Les candidats à un emploi ne sont pas tenus de divulguer les infractions pour lesquelles une grâce a été accordée.
Afin de vous offrir le processus de recrutement le plus efficace, Accenture peut utiliser l'intelligence artificielle pour déterminer la correspondance entre votre candidature et les exigences du poste auquel vous avez postulé. La décision définitive sera toujours prise par l’équipe de recrutement après avoir examiné l’intégralité de votre profil de candidat(e). Durant le processus de soumission de candidature, vous pouvez choisir de ne pas participer à ce processus de sélection par intelligence artificielle et être assuré(e) que cela n’aura pas d’impact négatif sur votre perspective d’emploi chez Accenture.
We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other.
We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work.
At Accenture, we see well-being holistically, supporting our people’s physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We’re proud to be consistently recognized as one of the World’s Best Workplaces™.
Join Accenture to work at the heart of change. Visit us at www.accenture.com.