Senior Associate, Identity Governance Engineering

About the role

Pfizer's CISO organization protects Pfizer's digital information assets, from scientific breakthroughs to the manufacturing floor, and Identity Governance and Administration (IGA) is central to securing access across the enterprise. This hands-on engineering role designs, builds and supports SailPoint Identity Security Cloud (ISC/IdentityNow) solutions, including custom connectors, provisioning patterns, forms and workflows, while staying familiar with other IGA tools. It covers the full identity lifecycle, from joiner, mover and leaver (JML) workflows to RBAC and ABAC access models and automated provisioning and deprovisioning, and works with business and technical stakeholders to turn requirements into compliant solutions.

Key responsibilities

• Design, develop and support SailPoint ISC/IdentityNow solutions, including custom connectors, provisioning patterns, forms and workflows.
• Support the end-to-end identity lifecycle, including JML workflows, and design RBAC and ABAC models.
• Configure and maintain automated provisioning and deprovisioning across enterprise applications.
• Develop and support REST API, SCIM and other enterprise identity integrations.
• Lead technical discovery, requirements gathering and solution design workshops with stakeholders.
• Troubleshoot and resolve complex issues during implementation and post-go-live support.
• Create and maintain technical documentation such as design documents, configuration guides and runbooks.
• Provide administration and operational support for SailPoint environments and support compliance requirements such as SOX, HIPAA and NIST.
• Maintain familiarity with other IAM tools and platforms for evaluations and cross-platform integration.

Required profile

• Bachelor's degree in Computer Science, Information Technology or a related discipline, or equivalent experience.
• 2+ years of experience designing, implementing and supporting SailPoint ISC/IdentityNow or similar tools.
• Experience with identity lifecycle management, JML processes, RBAC and ABAC, and automated provisioning and deprovisioning.
• Experience supporting SOX, HIPAA and NIST compliance requirements.
• Proficient business English and strong communication and consulting skills with business and technical stakeholders.
• Demonstrated experience in an agile work environment.

Required skills

• SailPoint Identity Security Cloud (ISC/IdentityNow)
• REST APIs and SCIM
• RBAC and ABAC access models
• Preferred: integration with Active Directory, Entra ID, Okta, ServiceNow, Salesforce, Workday; access certification campaigns and segregation of duties (SoD); SailPoint certifications

Work location is hybrid. Applications are made by sending a CV and a motivational letter in English.