Identity Solution Architect – IGA (SailPoint)

Shape identity governance at enterprise scale.

We are looking for an Identity Solution Architect (IGA) to lead the design and evolution of enterprise identity governance using SailPoint (IdentityNow / IdentityIQ). This is a strategic, hands-on architecture role where you will define how identity lifecycle, access governance, and policy-based automation are delivered across cloud and on-prem environments, embedding zero-trust principles by design.

You will act as the architectural authority for IGA, driving modern identity patterns, challenging legacy models, and enabling secure, compliant, and scalable access governance across the enterprise.

Your Impact

• Own the end-to-end architecture for SailPoint IGA, including integrations and governance workflows.
• Design scalable solutions for identity lifecycle management, access reviews, and policy enforcement.
• Define application onboarding strategies across HR systems, directories, SaaS, and enterprise platforms.
• Lead RBAC and ABAC models aligned to business and security needs.
• Drive automation of provisioning, deprovisioning, and access governance.
• Enable secure integration with cloud platforms, federated identity providers, and on-prem systems.
• Shape identity data models, authoritative sources, and compliance reporting.

What You’ll Be Working On

• Enterprise-wide SailPoint implementations (IdentityNow / IdentityIQ).
• Identity governance patterns supporting regulatory compliance and audit readiness.
• Zero-trust-aligned identity architectures and policy-driven controls.
• Collaboration with security, IAM operations, engineering, and application teams.
• Long-term identity architecture roadmap aligned with business transformation.

What We’re Looking For

• Proven experience as a Solution or Identity Architect delivering IGA at enterprise scale.
• Deep hands-on expertise with SailPoint IdentityNow and/or IdentityIQ.
• Strong understanding of identity lifecycle, access governance, and compliance frameworks.
• Experience designing integrations with HR systems, directories, SaaS, and cloud platforms.
• Solid knowledge of RBAC, ABAC, and identity data modelling.
• Ability to translate complex security and identity concepts into clear architectural direction.
• Experience working in Agile / DevOps, product-aligned environments.

Nice to Have

• Strong awareness of NIST, ISO 27001, and zero-trust security principles.
• Experience with hybrid identity environments and federated authentication.
• TOGAF or equivalent enterprise architecture experience.
• Background influencing cross-enterprise design decisions and governance boards.
• Relevant IAM or cloud security certifications.

If you think this is the right challenge for you, please send us a recent CV in English. Only shortlisted candidates will be contacted!

Licensed by MLSP, license N 2651, valid from 29.10.2018

Talent Hunter Ltd. informs you that part of the data you provide by sending your application is personal data and falls under the special treatment and protection of the Data Protection Law and the 2016/679 Regulation. The provided personal data will be processed for legally acknowledged purposes, related to the present job ad, as well as to the realization of the legal interest of the personal data administrator. Talent Hunter Ltd. processes, stores and uses the voluntarily provided personal data in the legally determined timeframes, guaranteeing their security and confidentiality. Please be informed that hereby you agree that Talent Hunter Ltd. might provide your personal data to government bodies and institutions, or third parties when there is such obligation by the law, or it is required for the realization of your rights and legal interests as a participant in a recruitment process with the purpose of concluding a future labor contract. As per the internal rules of Talent Hunter Ltd. you have the right to access and edit your personal data, the right to be deleted, and the right to object against processing, presenting, or revealing your personal data for purposes different from the ones, stated above.