IAM Test Engineer

A technically skilled, detail-oriented Test Engineer to execute validation, functional, and security testing for a range of Identity and Access Management (IAM) solutions, including SailPoint IdentityIQ (IIQ), Active Directory (AD), Entra ID and Privileged Access Management (PAM) platforms. The Test Engineer will play a critical role in ensuring the security, compliance, and operational integrity of IAM systems supporting identity lifecycle, access governance, and privileged account protection. Automation This role requires a proactive, self[1]motivated individual who excels in a remote environment, collaborates effectively with cross-functional teams, has an automate first mindset” and maintains rigorous documentation to meet audit and compliance standards.

Responsibilities:

Validation & Compliance Testing :

• Execute validation testing for IAM workflows, including identity lifecycle management, access provisioning/deprovisioning, and privileged account controls.
• Develop and maintain test cases, validation protocols, and scripts in alignment with GxP regulatory standards.
• Ensure detailed documentation of all test activities to maintain audit readiness and compliance traceability.
• Support regulatory audits by providing test results, defect tracking reports, and validation documentation across IAM systems.

Unit Testing & Functional Testing :

• Perform unit and functional testing across SailPoint IIQ, Active Directory objects (users, groups, policies), and PAM solutions.
• Validate enforcement of access controls, password policies, role hierarchies, and privileged account workflows.
• Test synchronization, role inheritance, dynamic group memberships, and deprovisioning activities.
• Identify and document defects, security gaps, and process deviations, collaborating closely with developers, system owners, and IAM engineers for resolution.

Application and Privileged Account Onboarding Testing

• Validate onboarding processes for new applications into IAM systems, ensuring correct entitlement mapping, provisioning rules, and attribute synchronization.
• Test integrations between IAM platforms and enterprise applications (e.g., SAP, ServiceNow, Workday).
• Verify onboarding and management of privileged accounts, credential vaulting, session monitoring, and access approvals within PAM systems for both human & non-human identities
• Conduct negative testing and security testing to ensure unauthorized access scenarios are mitigated.

Segregation of Duties (SoD) & RBAC Testing

• Execute SoD testing across IAM platforms to prevent conflict of interest in user entitlements.
• Validate RBAC frameworks to ensure roles, permissions, and inheritance models align with organizational policies and compliance needs.
• Identify excessive access, misconfigurations, and role bloating, providing detailed remediation plans.
• Collaborate with access governance teams to continuously refine SoD and RBAC policy enforcement through automated test cases.

Automation & Continuous Improvement

• Develop, maintain, and enhance automated test scripts for unit, functional, and regression testing across IAM systems.
• Work with engineers to integrate automated testing into CI/CD pipelines to support faster deployments and higher quality.
• Identify opportunities to optimize test coverage, reduce manual effort, and improve test cycle efficiency.
• Design test dashboards and reporting metrics to track execution, defect rates, and compliance KPIs.
  

Skills :

This role demands strong critical thinking, security risk analysis, and validation rigor — not just traditional QA skills.

Niche Skills: Testing specialized systems (IAM, PAM), regulatory-driven validation, SoD/RBAC security testing, and test automation in complex identity governance environments.