1. Identity Governance and Access Management
Platform Management and Administration
? Full lifecycle management, administration, and technical support of the SailPoint IdentityIQ platform.
? Daily monitoring of platform availability, scheduled tasks, performance metrics, and event logs.
? Management and remediation of platform issues, performance degradation, or service interruptions.
Support and Vendor Coordination
? Act as the primary liaison with SailPoint support, including opening support tickets, coordinating investigations, applying resolutions, and tracking issue closure.
? Participate in regular support review meetings and provide visibility into outstanding cases or enhancement requests.
Enhancement and Configuration
? Perform solution enhancements including:
o Modifying or creating new workflows
o Updating business logic
o Adjusting approval chains and access request routing
? Configure and update out-of-the-box or custom reports, dashboards, and compliance views.
? Manage software upgrades, patches, and version updates in alignment with vendor recommendations and MAF?s change management policies.
Identity Lifecycle Management
? Execute full identity lifecycle workflows including:
o Access provisioning and de-provisioning across integrated systems (cloud, on-premises, SSO-integrated or not)
o Joiner, mover, leaver (JML) processes
o Real-time offboarding of user accounts across all platforms upon termination or role change
? Ensure access requests are initiated, approved, and fulfilled as per MAF access control policies.
Access Governance and SoD Enforcement
? Implement and maintain Segregation of Duties (SoD) policies based on MAF?s business risk model.
? Ensure access certifications and SoD violations are continuously monitored and addressed.
? Provide support for periodic access review campaigns, including execution and reconciliation.
Health Checks and Continuous Improvement
? Conduct quarterly health checks to assess:
o Configuration accuracy
o Workflow performance
o Policy effectiveness
o System utilization and optimization opportunities
? Apply corrective actions and platform tuning based on assessment findings.
Integration and Interoperability
? Integrate SailPoint with:
o SIEM platforms for identity-related alerting and auditing
o ITSM platforms for automated service requests and approval workflows
o Dashboards or reporting systems for visibility and compliance tracking
Access Management Process Execution
? Fully execute all access requests and provisioning activities for systems under IAM scope.
? Maintain end-to-end traceability of access requests, approvals, provisioning steps, and completion.
? Ensure timely offboarding of access for separated users, fully revoking access to all connected
Platform Security and Access Controls
? Manage user access to the SailPoint platform and perform quarterly access reviews.
? Enforce Role-Based Access Control (RBAC) aligned with principle of least privilege.
? Monitor administrative
Documentation and SOP Maintenance
? Maintain up-to-date Standard Operating Procedures (SOPs) for:
o User onboarding/offboarding
o Role management
o Access reviews
o Workflow configurations
o Application integration processes
Business Continuity and Disaster Recovery
? Develop, maintain, and regularly test the BC/DR plan for the SailPoint environment.
? Ensure backup and recovery procedures for configurations, identities, and workflows are functional and validated.
Access Review Calendar Management
? Develop and maintain an Access Review Calendar that includes all in-scope business applications and technology platforms.
? Define review frequency and responsible owners for each system based on risk classification and business criticality.
? Ensure the calendar is updated at least semi-annually or whenever a new system is onboarded.
Access Review Execution
? Initiate and conduct access reviews in accordance with the agreed calendar, ensuring timely launch and completion of each cycle.
? Provide business and technical stakeholders with clear review instructions, timelines, and escalation protocols.
? Utilize the Identity Governance platform (e.g., SailPoint) or designated tools to facilitate reviews.
Stakeholder Coordination
? Identify and coordinate with business owners, application owners, and infrastructure teams to review and certify user access rights.
? Track review participation, escalate delays or non-compliance, and provide support throughout the review process.
? Ensure cross-functional alignment between application, business, and IAM teams.
Review Findings and Remediation
? Generate detailed access review reports for completed cycles, highlighting:
? User access anomalies
? Orphaned accounts
? Excessive privileges
? SoD violations (if applicable)
? Open remediation tickets for all required actions via the ITSM platform.
? Follow up and coordinate with relevant teams to ensure timely resolution of findings within SLA.
Reporting and Metrics
? Provide a monthly status report summarizing Access Review activities, including:
? Applications reviewed and pending
? Review completion status
? Summary of issues identified
? Remediation status of previously opened findings
Maintain audit-ready documentation for all access reviews and approvals.