Identity Security Engineering - SailPoint, Vice President

Job Description

We are seeking a Vice President, Identity Security Engineer to help shape and deliver a major identity modernisationprogramme, migrating from SailPoint IdentityIQ to SailPoint Identity Security Cloud. This is a hands-on technical leadership role for an engineer who enjoys solving complex security, data, integration and operating-model challenges at enterprise scale. You will work with engineering, security, operations and business partners to design a modern identity platform that is secure, resilient, scalable and easier for people to use. The successful candidate will combine deep SailPoint and identity governance expertise with the judgement, ownership and communication skills needed to lead complex changes across a global organisation.

Key Responsibilities

• Lead the technical design and delivery of the migration from SailPoint IdentityIQ to SailPoint Identity Security Cloud, treating the move as a platform transformation rather than a like-for-like upgrade.

• Define the future-state identity architecture, including identity data models, application onboarding patterns, access request processes, provisioning, deprovisioning, certifications and policy controls.

• Translate complex IdentityIQ workflows, rules, connectors and customisations into secure, maintainable, cloud-aligned designs using Identity Security Cloud capabilities and extensibility options.

• Make practical engineering decisions that balance security, user experience, delivery risk, regulatory expectations and long-term maintainability.

• Partner with application, infrastructure, cloud, HR, operations, risk and compliance teams to resolve dependencies and keep delivery moving across a complex enterprise environment.

• Lead technical planning across discovery, design, build, testing, parallel run, cutover and operational readiness, with clear ownership of risks, dependencies and outcomes.

• Set high engineering standards for documentation, testing, observability, change control, resilience and secure-by-design delivery.

• Coach engineers, share technical knowledge and create an environment where teams can make good decisions quickly and safely.

• Identify opportunities to simplify legacy processes, reduce manual effort, improve controls and unlock the benefits of a modern cloud identity platform.

Qualifications / Competencies

• Strong hands-on experience designing, building or leading SailPoint IdentityIQ, SailPoint Identity Security Cloud, or comparable identity governance platforms.

• Experience with IdentityIQ to Identity Security Cloud migration, cloud identity transformation, or modernisation of a mature identity governance environment.

• Deep understanding of identity governance and administration, including joiner, mover and leaver processes, access requests, certifications, role models, policies and segregation of duties.

• Ability to assess existing workflows, rules, connectors, data flows and customisations, then redesign them for a more scalable and maintainable cloud platform.

• Strong engineering background across APIs, integrations, directories, HR sources, application onboarding, automation and secure system design.

• Experience integrating identity platforms with Microsoft Entra ID, Active Directory, LDAP, HR systems, SaaS applications, on-premises applications and privileged access platforms.

• Comfortable leading technical discussions with senior stakeholders and explaining complex engineering trade-offs in clear, practical language.

• Proven ability to lead complex initiatives across distributed teams, manage ambiguity and drive delivery without losing sight of quality or risk.

• Strong ownership mindset, with the ability to anticipate problems, remove blockers and make decisions that move the programme forward.

• Clear communicator who can build trust with engineering teams, business partners and control functions.

Desirable Skills

• SailPoint certification, Identity Security Cloud Engineer certification, CISSP, CISM or similar security qualification.

• Experience using identity analytics, risk-based access insights or AI-assisted governance to improve access decisions and reduce manual review effort.

• Experience with CyberArk or other privileged access management technologies.

• Experience delivering security or identity change in regulated, high-scale or highly governed environments.

• Understanding of Zero Trust, least privilege, non-human identities, cloud security and modern access governance patterns.

• Experience simplifying legacy processes and helping teams adopt more modern engineering practices.