SailPoint IdentityIQ (IIQ) / IAM Engineer – Access Governance & OT

About the Assignment

We are looking for an experienced IAM Engineer with hands-on SailPoint IdentityIQ (IIQ) expertise to support the end-to-end delivery of IAM solutions within the Access Governance domain.

The consultant will play a key role in the architecture, implementation, rollout, and ongoing operation of the IGA platform across both IT and OT environments, working closely with business units, global IT, OT stakeholders, and engineering teams.

Key Responsibilities

• Own and contribute to the end-to-end IAM solution delivery within the Access Governance domain, ensuring secure, compliant, and fit-for-purpose implementation of the IAM platform across IT and OT environments.

• Lead and support the architecture and rollout of the IGA solution for the OT domain, engaging with business units, global IT, and OT stakeholders to address regulatory, partner, and customer security requirements.

• Shape and execute the OT IAM rollout roadmap, onboarding OT assets onto the IGA platform and driving delivery against key Go-Live milestones in Q2 2026, Q1 2027, and subsequent phases.

• Apply and uphold Ørsted IAM security best practices, guidelines, blueprints, and design patterns, ensuring alignment with enterprise architecture principles and OT-specific constraints.

• Act as a trusted IAM advisor to stakeholders, translating security concerns and regulatory requirements into scalable access governance solutions embedded into operational and delivery processes.

Day-to-Day Responsibilities

OT IGA Rollout
Support the OT IGA project rollout, with continuous asset rollout throughout 2026–2028. This includes requirement analysis and review, technical and low-level design implementations, code reviews, UAT, and support for pre- and post-deployment activities.

Platform Operations & Support
Provide operational platform support for Ørsted, including basic user issues and queries, certificate changes, advanced troubleshooting, patch and SailPoint security fixes management, releases, and hotfixes.

Active Directory Administration
Perform operational user administration tasks in Active Directory, including managing users and groups, resetting passwords, and conducting access reviews.

Application Lifecycle Management
Perform application lifecycle management across the IGA solution for applications within the OT landscape, including:

• Active Directory

• Delimited files

• Linux

• Windows Server

• REST

Engineering Support
Provide support to the Lead Engineer on development and support tasks required across the IGA platform.

Requirements

SailPoint IdentityIQ

2–3+ years of hands-on technical implementation experience with SailPoint IdentityIQ (IIQ), including configuration, customization, maintenance, and troubleshooting in enterprise environments.

IAM Engineering & Operations

Strong practical experience with IAM and Access Governance platforms in large-scale, multi-site environments, with a solid understanding of:

• Identity Lifecycle Management

• Access Governance

• Role-Based Access Control (RBAC)

Experience within the OT domain is considered an advantage.

Active Directory & Automation

Hands-on experience with Active Directory user, group, and lifecycle administration. Working knowledge of PowerShell for automation and operational efficiency is a plus.

Application Onboarding & Platform Delivery

Proven experience onboarding applications into IAM/IGA platforms, applying best practices for integrations, entitlement modelling, and lifecycle workflows.

Technical Troubleshooting

Ability to support technical maintenance, enhancements, and incident resolution across one or more IAM technologies, ensuring platform stability and security.

Agile / SAFe

Experience working in SAFe/agile delivery environments, including participation in:

• PI Planning

• System Demos

• Inspect & Adapt

• Collaboration with Product Management, RTEs, and System Teams

Collaboration & Stakeholder Management

Ability to work effectively with virtual and culturally diverse teams and stakeholders across multiple time zones, communicating clearly with both technical and non-technical audiences.

Location: Gentofte, Denmark
Work model: Remote
Domain: IAM / IGA / Access Governance / OT
Platform: SailPoint IdentityIQ (IIQ)