SailPoint Engineering Lead

WTW • Edinburgh, IN

7d • Hybrid

About The Position

Willis Towers Watson (WTW) Information & Cyber Security (ICS) requires an experienced SailPoint Engineering Lead to work within the Identity and Access Management function, combining hands-on IGA engineering with product ownership of the identity platform roadmap. As an experienced SailPoint engineer, you will be responsible for designing and building SailPoint Identity Security Cloud (ISC) solutions, developing and maintaining Joiner, Mover & Leaver automation, and owning the backlog and roadmap for our Identity Governance platform, ensuring we continue to meet regulatory and client expectations. This role is a hybrid role in London, where the normal working base location will be balance between home and office as needed.

Willis Towers Watson IT is currently seeking a senior, experienced candidate for the position of SailPoint Engineering Lead. In this position, the successful candidate must demonstrate significant hands-on experience engineering SailPoint IGA solutions, together with the seniority to set technical direction, own and prioritise a product backlog, and mentor engineers within the team. The main focus of this position is to lead the build, operation and continuous improvement of our SailPoint platform while acting as product owner for the identity platform roadmap, influencing senior stakeholders and ensuring successful delivery of service, stakeholder alignment and continuous development of the IAM Team.

Requirements

• Strong background and working years in IAM/IGA engineering, including 3+ years hands-on with SailPoint Identity Security Cloud (ISC) and/or IdentityIQ (IIQ), with demonstrated experience leading IGA engineering teams.
• Strong understanding of IGA concepts: JML lifecycle, access certification, SoD, role-based access control.
• Experience integrating SailPoint with HR systems, Active Directory/Entra ID and SaaS applications via SCIM/REST.
• Scripting proficiency in Beanshell/Java (for SailPoint rules) and Python (for automation and API integration).
• Working knowledge of identity standards: SAML, OAuth2/OIDC, SCIM.
• Experience with access governance frameworks and compliance mapping (ISO 27001, SOC 2, GDPR or similar).
• Demonstrated experience writing user stories, managing a backlog, or working closely with product/agile teams.
• Strong stakeholder communication skills, able to translate technical detail for both engineers and business stakeholders.
• Good project management skills.
• Positive team-first attitude with strong verbal and written communication skills.
• Must possess sound analytical and problem-solving capabilities.

Nice To Haves

• SailPoint certification (ISC Engineer/Architect).
• Experience with Saviynt, Omada or One Identity as a comparison point.
• Familiarity with Agile/Scrum ceremonies and tools (Jira, Azure DevOps).
• Exposure to Zero Trust principles and NIST SP 800-53 AC/IA control families.

Responsibilities

• Lead the design, build and maintenance of SailPoint Identity Security Cloud (ISC) solutions, including source connectors, provisioning workflows and access certification campaigns across WTW.
• Own and prioritise the SailPoint/IGA platform backlog, setting technical direction and acting as product owner for the identity platform roadmap based on business risk, compliance deadlines and stakeholder demand.
• Oversee the build and maintenance of Joiner, Mover & Leaver (JML) automation integrating HR systems (Oracle HCM) with SailPoint.
• Define and govern Segregation of Duties (SoD) policies, role models and access certification campaigns across WTW.
• Act as the senior technical authority within IAM, covering all aspects of Identity Governance and Administration.
• Drive solution development through problem solving, ensuring adherence to Security Controls, Policies and Standards with a focus on automation and control.
• Influence senior stakeholders across IT, Compliance and the business to align the identity platform roadmap with WTW's risk and regulatory priorities.
• Lead the development of skills and capabilities within the IAM team, mentoring engineers and driving process improvements and documentation.
• Oversee configuration and troubleshooting of SCIM, REST and direct connectors to SaaS and on-prem applications, working hands-on where required.
• Author and review custom rules, workflows and Beanshell/Java scripts and Python automation, setting standards for the wider team.
• Govern the operational execution of access certification cycles, entitlement catalogue management and role mining initiatives.
• Oversee platform health, ensuring provisioning/deprovisioning failures are resolved, and audit trail integrity is maintained.
• Lead sprint planning, backlog grooming and roadmap reviews.
• Own roadmap and status communications for leadership and stakeholders.
• Oversee the user identity lifecycle, including onboarding, offboarding and account updates.
• Ensure compliance with internal policies and external regulations, escalating risks as needed.
• Own the response to audit findings and drive remediation measures to closure.
• Oversee resolution of escalated issues and support tickets, providing senior technical input where needed.

Benefits

• 25 days of annual leave plus an extra WTW day
• Private healthcare
• Life insurance
• Group income protection
• Regular health assessments
• Defined contribution pension scheme, featuring matched contributions up to 10% from the company
• Hybrid working options
• Employee assistance programme
• Fully paid volunteer day
• Electric vehicle car scheme
• Share scheme
• Cycle-to-work programme
• Dental and optical cover
• Critical illness protection

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed