Description

Job Overview and Responsibilities

The Senior Engineer - Identity & Access Management is primarily responsible for advanced operational support of a large, complex Identity and Access Management (IAM) system with hands-on engineering and development, expertise in IAM and IGA solution architectures, as well as cloud-first architectures and design principles. This person will act as a key stakeholder in improving technology stability, service reliability, audit and compliance processes, and secure by design architecture patterns that align with cybersecurity, compliance, and business requirement, in addition to being a subject matter expert for peers both internal and external to the IAM team.

The technology focus for this role will be on the implementation and support of United Identity Governance and Administration (IGA) platform. This position will work in collaboration with Architects, engineers, and stakeholders to design, build, and deploy IGA Capabilities across a variety of technologies both on-prem and in the cloud.

This individual will work both independently and collaboratively to build and maintain identity management solutions that meet organizational needs. They should exhibit a high degree of self-motivation and possess excellent communication, documentation, and relationship building skills.

• Engineer, configure, test, and implement Identity Governance and Administration capabilities supporting Joiner, Mover, and Leaver workflows, access provisioning, and lifecycle-based access controls across cloud and on-premises applications.
• Produce maintainable configuration, integration designs, test evidence, and implementation documentation.
• Partner with Principal Architect on design for JML workflows, automated access provisioning, ServiceNow integrations, access request patterns, and certification capabilities.
• Evaluate design alternatives and document architecture decisions, risks, assumptions, controls, and integration dependencies.
• Design and implement identity lifecycle workflows that automate account creation, modification, termination, birthright access, role-based access, and policy-driven provisioning.
• Ensure workflow requirements are testable, auditable, and aligned to enterprise identity, regulatory, and cybersecurity standards.
• Create and maintain technical requirements, reference architectures, interface designs, workflow specifications, and acceptance criteria for IGA capabilities, including ServiceNow integrations, access provisioning, non-human identity lifecycle management, and access certification processes.
• Develop scalable integration patterns and automation for access requests, approvals, fulfillment, revocation, and certification outcomes across IGA, ServiceNow, authoritative sources, and target systems. Advance reusable designs that improve control effectiveness, audit readiness, and secure access governance.
• Serve as a technical authority for IGA solution design across application owners, product teams, cybersecurity, audit, and compliance stakeholders.
• Guide adoption of JML, access provisioning, non-human identity governance, ServiceNow integration, and access certification practices aligned to enterprise strategy and control requirements.

Qualifications

What's needed to succeed (Minimum Qualifications):

• Bachelor's degree required, STEM field preferred.
• 3+ years of relevant experience.
• Advanced knowledge of enterprise IAM and IGA, including application onboarding, identity lifecycle management, access provisioning, user access reviews, least privilege, role-based access control, and access governance.
• Experience implementing or maintaining, engineering, and/or architecting modern IGA platforms such as Saviynt, SailPoint, or comparable solutions.
• Direct experience engineering and architecting solutions within Saviynt.
• Ability to design, build, test, and troubleshoot integrations using APIs, web services, files, databases, directories, cloud services, and other application interfaces.
• Ability to define technical requirements, architecture diagrams, interface designs, solution patterns, threat models, decision records, test evidence, runbooks, and support procedures.
• Experience with automation, scripting, source control, deployment pipelines, monitoring, testing, change management, and reliability practices across non-production and production environments.
• Strong problem-solving, critical-thinking, documentation, relationship-building, and written and verbal communication skills, with the ability to explain complex technical and risk topics to technical and non-technical stakeholders.
• Ability to work independently and collaboratively, prioritize work against enterprise strategy, build consensus across diverse priorities, and drive outcomes without direct supervisory authority.
• Must be legally authorized to work in the United States for any employer without sponsorship
• Successful completion of interview required to meet job qualification
• Reliable, punctual attendance is an essential function of the position

What will help you propel from the pack (Preferred Qualifications):

• Master's degree in Cybersecurity, Risk Management, Computer Science
• Certifications like CISA, CISM, CISSP
• Knowledge of security, privacy, and compliance frameworks, including NIST, ISO, OWASP, SOX, PCI, FAA, GDPR, and PII obligations.
• Experience with EIAM tools and platforms such as Delinea, Entra, Active Directory, Oracle Access Manager, SailPoint, Saviynt, and related identity technologies.
• Knowledge of secure development principles, authentication protocols, encryption, common vulnerabilities, application risk assessment, and security testing concepts.
• Understanding of cloud and conventional infrastructure, web applications, network and application protocols, DevOps, CI/CD automation, and secure system integration.
• Experience integrating secure development and identity governance practices into agile or waterfall delivery models and influencing architecture and engineering outcomes in a large enterprise.

Job Posting Expiration: 10/30/2026