Prin Cybersecurity Specialist

About the role

Serve as the technical owner and is responsible for configuration of access certification and review program. Translate governance policies, regulatory requirements, and control objectives into scalable certification. Define integration requirements including out-of-the-box and custom connectors, API-based, file-based, database-based, and directory-based integrations. Specify required attributes, aggregation rules, mappings, and correlation logic to support accurate certifications.

Responsibilities

• Architect and configure user, entitlement, role, and application certifications.
• Design reviewer assignment logic and delegation models.
• Establish escalation paths, reminders, and completion SLAs.
• Implement automated remediation and revocation workflows.
• Review and approve changes impacting certification accuracy, control effectiveness, auditability, or scalability.
• Apply working knowledge of SQL and relational data structures to support reconciliation, reporting, and troubleshooting.
• Provide detailed technical explanations of certification logic, configurations, and automation to internal and external auditors.
• Collaborate with business and application teams to ensure governance requirements align with source system capabilities.
• Maintain configuration documentation, certification runbooks, and operational reporting.
• Continuously evaluate features and industry best practices to enhance certification effectiveness.
• Recommend governance and security enhancements to leadership based on risk, audit findings, and platform capabilities.
• Plan, design, and build security architectures; oversee implementation of network and computer security; ensure compliance with corporate cybersecurity policies and procedures.
• Monitor cybersecurity requirements for LANs, WANs, VPNs, routers, firewalls, and related network devices.
• Perform security assessments of applications and systems using penetration and vulnerability testing and risk analysis.
• Specialize in understanding cyber adversary tactics, techniques, and procedures to protect the network.
• Detect and mitigate cyber incidents and vulnerabilities.
• Conduct cyber defense operations, specialized penetration testing, threat client & forensics, and advanced security management.
• Develop cybersecurity considerations to meet evolving cloud computing, web development, and mobile device requirements.
• Use technologies, processes, and practices to protect computers, networks, programs, and data from unauthorized access or attacks.
• Monitor and protect products and systems.

Requirements

• Bachelor's degree or university degree.
• 4 years of experience in Identity Governance & Administration (IGA) or IAM.
• Hands-on experience operating SailPoint Identity Security Cloud, with deep focus on access certifications and reviews.
• Strong expertise in user, entitlement, and role certifications.
• Identity correlation and aggregation.
• Entitlement modeling and RBAC.
• Familiarity with scripting or automation used alongside SailPoint (e.g., REST APIs, PowerShell).
• Experience with SailPoint integrations using connector-based, API-based, file-based, and database-backed approaches.
• Ability to analyze data quality issues that impact certification accuracy.
• Ability to clearly communicate certification design, risk, and evidence to audit, compliance, and business stakeholders.

Qualifications

• Experience supporting identity lifecycle processes and deprovisioning workflows.
• Experience designing certification programs in large, complex, or regulated environments.
• Strong technical leadership and influence skills.
• Ability to establish and revise processes/documents based on new and changing security requirements.
• Demonstrated knowledge of information security policies, standards, and/or governance controls in complex computing environments.