SailPoint-Certified RBAC Expert

Location: Riyadh, Saudi Arabia — OnsiteEngagement: Full-Time or 12-Month Contract with Possible ExtensionExperience: 7+ years in Identity and Access ManagementCompensation: SAR 16,000–20,000 per month; Joining Timeline: Within 30 days preferredAbout the OpportunityWe are hiring an experienced SailPoint-Certified RBAC Expert to support the design, implementation and governance of enterprise Role-Based Access Control capabilities.The successful candidate will work onsite in Riyadh and collaborate with cybersecurity, technology, application and business teams to build scalable access models aligned with least-privilege, compliance and identity-governance requirements.Candidates currently based in Saudi Arabia and qualified international candidates willing to relocate to Riyadh are welcome to apply.Key ResponsibilitiesDesign and implement enterprise RBAC models using SailPoint.Lead role discovery, role mining, role engineering and role optimization.Develop business roles, IT roles, role hierarchies and entitlement mappings.Configure and support access requests, approvals, provisioning, lifecycle events and access certifications.Establish RBAC governance standards, role ownership and periodic review processes.Identify excessive, conflicting, orphaned or inappropriate access.Support Segregation of Duties policies and remediation.Integrate SailPoint with directories, enterprise applications, databases and cloud platforms.Conduct workshops with business and application owners.Prepare RBAC matrices, solution designs, governance documentation and operational procedures.Support IAM audits and regulatory requirements.Troubleshoot SailPoint role management, workflow, aggregation and provisioning issues.Required Experience7+ years of experience in IAM, including strong enterprise RBAC experience.Hands-on experience with both SailPoint IdentityIQ and Identity Security Cloud.Strong experience in role mining, role engineering and role governance.Knowledge of identity lifecycle management, access certification, provisioning, entitlement management and SoD.Experience integrating SailPoint with technologies such as Active Directory, Microsoft Entra ID, SAP, Oracle, ServiceNow, databases and REST APIs.Strong stakeholder-management, analytical and documentation skills.Ability to work onsite in Riyadh.Mandatory CertificationA SailPoint Certified Professional certification or higher is mandatory.Applications without an active SailPoint certification may not be considered.Preferred Technical SkillsJava or BeanShell experience for IdentityIQ customization.Strong SQL skills for identity and entitlement analysis.Experience with REST/SOAP APIs and enterprise IAM integrations.Understanding of SAML, OAuth 2.0, OpenID Connect and SCIM.Knowledge of least-privilege and Zero Trust principles.Compensation and Relocation SupportMonthly package of SAR 16,000–20,000.Employment visa sponsorship for qualified international candidates.Initial travel expenses to Riyadh.One month of initial accommodation.Additional benefits will be discussed during the selection process.