SailPoint-Certified RBAC Expert

Location: Riyadh, Saudi Arabia — Onsite

Engagement: Full-Time or 12-Month Contract with Possible Extension

Experience: 7+ years in Identity and Access Management

Compensation: SAR 16,000–20,000 per month;

Joining Timeline: Within 30 days preferred

About the Opportunity

We are hiring an experienced SailPoint-Certified RBAC Expert to support the design, implementation and governance of enterprise Role-Based Access Control capabilities.

The successful candidate will work onsite in Riyadh and collaborate with cybersecurity, technology, application and business teams to build scalable access models aligned with least-privilege, compliance and identity-governance requirements.

Candidates currently based in Saudi Arabia and qualified international candidates willing to relocate to Riyadh are welcome to apply.

Key Responsibilities

• Design and implement enterprise RBAC models using SailPoint.
• Lead role discovery, role mining, role engineering and role optimization.
• Develop business roles, IT roles, role hierarchies and entitlement mappings.
• Configure and support access requests, approvals, provisioning, lifecycle events and access certifications.
• Establish RBAC governance standards, role ownership and periodic review processes.
• Identify excessive, conflicting, orphaned or inappropriate access.
• Support Segregation of Duties policies and remediation.
• Integrate SailPoint with directories, enterprise applications, databases and cloud platforms.
• Conduct workshops with business and application owners.
• Prepare RBAC matrices, solution designs, governance documentation and operational procedures.
• Support IAM audits and regulatory requirements.
• Troubleshoot SailPoint role management, workflow, aggregation and provisioning issues.

Required Experience

• 7+ years of experience in IAM, including strong enterprise RBAC experience.
• Hands-on experience with both SailPoint IdentityIQ and Identity Security Cloud.
• Strong experience in role mining, role engineering and role governance.
• Knowledge of identity lifecycle management, access certification, provisioning, entitlement management and SoD.
• Experience integrating SailPoint with technologies such as Active Directory, Microsoft Entra ID, SAP, Oracle, ServiceNow, databases and REST APIs.
• Strong stakeholder-management, analytical and documentation skills.
• Ability to work onsite in Riyadh.

Mandatory Certification

A SailPoint Certified Professional certification or higher is mandatory.

Applications without an active SailPoint certification may not be considered.

Preferred Technical Skills

• Java or BeanShell experience for IdentityIQ customization.
• Strong SQL skills for identity and entitlement analysis.
• Experience with REST/SOAP APIs and enterprise IAM integrations.
• Understanding of SAML, OAuth 2.0, OpenID Connect and SCIM.
• Knowledge of least-privilege and Zero Trust principles.

Compensation and Relocation Support

• Monthly package of SAR 16,000–20,000.
• Employment visa sponsorship for qualified international candidates.
• Initial travel expenses to Riyadh.
• One month of initial accommodation.
• Additional benefits will be discussed during the selection process.