IAG Engineer for Grading, Johannesburg

IAG Engineer | Johannesburg | Permanent

Shape how access is governed, secured, and automated across a complex enterprise environment. This is an opportunity to own and evolve a critical identity governance platform that directly impacts risk, compliance, and operational efficiency.

In this role, you will design, implement, and optimise Identity and Access Governance (IAG) solutions, ensuring seamless identity lifecycle management and robust access control across systems. You will work across platforms and stakeholders to automate provisioning, strengthen governance frameworks, and improve the overall maturity of identity management practices.

Our client is a well-established organisation operating in a highly regulated environment, with a strong focus on security, governance, and digital transformation. They are investing in modern identity solutions to enhance control, scalability, and user experience.

What You’ll Do

Design, implement, and maintain IAG platforms such as SailPoint, Saviynt, One Identity, or Entra ID Governance

Configure identity lifecycle workflows including joiner, mover, and leaver processes

Manage integrations with Active Directory, Entra ID, HR systems, business applications, and cloud platforms

Automate user provisioning and de-provisioning based on identity attributes

Implement and enforce least-privilege access models

Design and maintain business roles, IT roles, and entitlement models

Conduct role mining and optimisation to reduce complexity and access sprawl

Configure and manage access certification campaigns across users, privileged access, and applications

Track review progress, exceptions, and remediation actions

Provide audit-ready reporting and evidence of access approvals

Drive automation using APIs, workflows, and scripting

Collaborate with HR, IT, Security, Risk, Audit, and business stakeholders

What You Bring

Bachelor’s degree in Computer Science, Information Systems, or a related field

5+ years of experience in identity governance or PAM engineering

Strong experience with IAG platforms such as SailPoint, Saviynt, One Identity, or Entra ID Governance

Deep understanding of identity lifecycle management and access provisioning models

Solid knowledge of RBAC and directory services such as Active Directory and LDAP

Strong analytical and problem-solving capability

Ability to engage both technical and business stakeholders effectively

Clear documentation and communication skills

Detail-oriented with a risk-based mindset

What Success Looks Like

Efficient and accurate identity lifecycle management processes

Strong adherence to least-privilege access principles

High-quality, scalable role and entitlement models

Successful completion of access reviews and certifications

Positive audit outcomes with minimal findings

Stable, performant, and scalable IAG platform operations

#J-18808-Ljbffr