Group Specialist - Identity Access Control

• Develop, review & update access management procedure that can be followed by Group Technology, other business departments & regional technology teams

• Design, implement, and enhance enterprise IAM architecture and engineering solutions with a focus on SailPoint and PAM platforms. 

• Build scalable identity governance and administration capabilities for workforce identities, including employees, contractors, and third-party users. 

• Define and maintain IAM standards, design patterns, integration patterns, and operational procedures. 

• Partner with cybersecurity architecture and enterprise technology teams to ensure IAM solutions are secure, scalable, and aligned with enterprise standards.Liaise with Application Governance Specialist to understand the applications, access provisioning mechanisms etc. for each application

• Assist BUs in conducting access control reviews of their applications & systems

• Lead and support onboarding of enterprise applications into SailPoint for access provisioning, deprovisioning, access requests, certification, and role-based governance. 

• Design and implement connectors, workflows, rules, roles, policies, and provisioning integrations in SailPoint. 

• Integrate SailPoint with target systems such as Active Directory, Azure AD/Entra ID, LDAP, databases, cloud platforms, business applications, and custom applications. 

• Work with application owners to define birthright access, approval workflows, entitlement models, RBAC, and SoD controls. 

• Ensure accurate reconciliation of accounts, entitlements, and access data across onboarded applications. 

• Strong hands-on experience in Identity and Access Management (IAM) engineering and delivery. 

• Proven experience with SailPoint (IdentityIQ, IdentityNow, or equivalent SailPoint platform). 

• Strong experience in Privileged Access Management (PAM) platforms such as CyberArk, BeyondTrust, Delinea, or similar. 

• Experience integrating HRMS systems with IAM platforms to automate Joiner, Mover, Leaver lifecycle processes. 

• Strong understanding of RBAC, ABAC, SoD, access request workflows, certification, provisioning, reconciliation, and identity lifecycle management. 

• Experience onboarding applications to IAM tools using APIs, connectors, SCIM, JDBC, LDAP, AD, REST, SOAP, or custom integration methods. 

• Experience managing privileged accounts including vaulting, password rotation, session monitoring, and least privilege controls. 

• Knowledge of Active Directory, Azure AD/Entra ID, LDAP, MFA, SSO, federation, service accounts, cloud identities, and enterprise application authentication models.  

• Scripting or development capability in Java, BeanShell, PowerShell, Python, SQL, or similar for automation and integration is preferred.Act as an ambassador for DP World at all times when working; promoting and demonstrating positive behaviours in harmony with DP World’s Principles, values and culture; ensuring the highest level of safety is applied in all activities; understanding and following DP World’s Code of Conduct and Ethics policies

QUALIFICATIONS, EXPERIENCE AND SKILLS

• Knowledge and Experience

• Bachelor’s degree in computer science or equivalent

• Should have 10-12 years of experience in IAM engineering

• Experience with SailPoint IdentityIQ or IdentityNow implementation and customization. 

• Experience with PAM tools such as CyberArk, BeyondTrust, Delinea, or Arcon. 

• Familiarity with ITSM and workflow tools such as ServiceNow. 

• Experience with cloud and hybrid identity environments. 

• Understanding of security architecture, zero trust principles, and access governance best practices. 

• Relevant certifications such as SailPoint certifications, CyberArk certifications, CISSP, CISM, or equivalent are desirable.

• Program and Project management skills

• Time management skills

• Team player and conflict management skills

• Coaching / guiding skills

• Ability to adapt in a complex environment, loves challenges, with the will and drive to learn new things on his/her own

Technical Skills

• Technical know-how about IAM & PAM engineering and implementation

• Knowledge of Active Directory, Azure AD/Entra ID, LDAP, MFA, SSO, federation, service accounts, cloud identities, and enterprise application authentication models.  

• Scripting or development capability in Java, BeanShell, PowerShell, Python, SQL, or similar for automation and integration is preferred.

• Knowledge of developing policies, procedures related to access management processes

• Act as an ambassador for DP World at all times when working; promoting and demonstrating positive

   

#LI-AA6