Associate Director, Identity Governance and Administration (SailPoint IGA)

Location: Manchester, United Kingdom; hybrid work with 2 days per week in the office required.

Company

Fitch Group is a global financial information services provider delivering credit, risk, data, and analytics solutions through Fitch Ratings and Fitch Solutions.

What you will do

• Design, develop, and maintain integrations between SailPoint Identity Security Cloud and HR platforms, cloud providers, SaaS applications, directories, and other enterprise systems.
• Build privileged-access integrations with Delinea Secret Server and Delinea Platform, including vault configuration and secret lifecycle management.
• Develop Python automation for provisioning, aggregation, transformation rules, reporting pipelines, and operational tooling.
• Design and operate joiner-mover-leaver, access request, access certification, RBAC, least-privilege, separation-of-duties, and attestation processes.
• Manage version-controlled and containerised IGA artefacts using Git, Docker, and structured deployment processes.
• Support audits, platform monitoring, documentation, application onboarding, and collaboration with engineering, operations, compliance, and security teams.

Requirements

• 5+ years of hands-on IGA or IAM engineering experience, including platform implementation and integrations.
• Experience with SailPoint Identity Security Cloud or an equivalent IGA platform, including connectors, rules, workflows, and access certification.
• Experience with Delinea Secret Server or Delinea Platform and privileged-access management.
• Strong Python, REST/SOAP integration, Git, and Docker experience.
• Knowledge of JML, RBAC, least privilege, separation of duties, access certification, privileged session management, and break-glass procedures.
• Experience with Entra ID/Azure AD, Active Directory, AWS, Linux, Windows Server, audit engagements, and technical stakeholder communication.

Nice to have

• Vue.js or another JavaScript front-end framework for identity-related portals.
• Experience with AWS Secrets Manager, Azure Key Vault, Oracle Wallet, or external-secrets patterns.
• SailPoint, CISSP, CISM, CISA, or Security+ certification.
• Infrastructure-as-code, CI/CD, IGA strategy, and AI-assisted engineering experience.

Culture & Benefits

• Hybrid work environment with two office days per week based on the line of business and location.
• Training, leadership development, mentorship, and internal mobility opportunities.
• Healthcare, retirement planning, tuition reimbursement, and global parental leave.
• Inclusive workplace with employee resource groups and paid volunteer opportunities.
• AI-enabled working environment focused on responsible use of technology and continuous learning.