Location: Riyadh, Saudi Arabia — Onsite Engagement: Full-Time or 12-Month Contract with Possible Extension Experience: 7+ years in Identity and Access Management Compensation: SAR 16,000–20,000 per month; Joining Timeline: Within 30 days preferred
About the Opportunity
We are hiring an experienced Sail Point-Certified RBAC Expert to support the design, implementation and governance of enterprise Role-Based Access Control capabilities.
The successful candidate will work onsite in Riyadh and collaborate with cybersecurity, technology, application and business teams to build scalable access models aligned with least-privilege, compliance and identity-governance requirements.
Candidates currently based in Saudi Arabia and qualified international candidates willing to relocate to Riyadh are welcome to apply.
Key Responsibilities Design and implement enterprise RBAC models using Sail Point. Lead role discovery, role mining, role engineering and role optimization. Develop business roles, IT roles, role hierarchies and entitlement mappings. Configure and support access requests, approvals, provisioning, lifecycle events and access certifications. Establish RBAC governance standards, role ownership and periodic review processes. Identify excessive, conflicting, orphaned or inappropriate access. Support Segregation of Duties policies and remediation. Integrate Sail Point with directories, enterprise applications, databases and cloud platforms. Conduct workshops with business and application owners. Prepare RBAC matrices, solution designs, governance documentation and operational procedures. Support IAM audits and regulatory requirements. Troubleshoot Sail Point role management, workflow, aggregation and provisioning issues.
Required Experience7+ years of experience in IAM, including strong enterprise RBAC experience. Hands-on experience with both Sail Point Identity IQ and Identity Security Cloud. Strong experience in role mining, role engineering and role governance. Knowledge of identity lifecycle management, access certification, provisioning, entitlement management and SoD. Experience integrating Sail Point with technologies such as Active Directory, Microsoft Entra ID, SAP, Oracle, Service Now, databases and REST APIs. Strong stakeholder-management, analytical and documentation skills. Ability to work onsite in Riyadh.
Mandatory Certification A Sail Point Certified Professional certification or higher is mandatory. Applications without an active Sail Point certification may not be considered.
Preferred Technical Skills Java or Bean Shell experience for Identity IQ customization. Strong SQL skills for identity and entitlement analysis. Experience with REST/SOAP APIs and enterprise IAM integrations. Understanding of SAML, OAuth 2.0, Open ID Connect and SCIM. Knowledge of least-privilege and Zero Trust principles.
Compensation and Relocation Support Monthly package of SAR 16,000–20,000. Employment visa sponsorship for qualified international candidates. Initial travel expenses to Riyadh. One month of initial accommodation. Additional benefits will be discussed during the selection process.