Lead IAM Security Engineer - Saviynt IGA Or Cyber Ark PAM

We are seeking an experienced Lead IAM Security Engineer with deep expertise in Saviynt Identity Governance & Administration (IGA) to help mature and modernize a large enterprise IAM program.

This is an engineering-focused role designed for professionals who build, improve, and transform IAM capabilities—not individuals primarily performing day-to-day administration or ticket-based support.

The ideal candidate will drive IAM strategy, automation, governance, and program maturity while partnering with internal stakeholders and third-party service providers.

Success in this role is measured by innovation, problem solving, process improvement, and the ability to deliver long-term IAM solutions that strengthen security, compliance, and operational efficiency.

• Challenge the status quo and continuously seek improvements.
• Identify security gaps and opportunities for modernization.
• Drive IAM program maturity through engineering and automation.
• Develop strategic roadmaps and execution plans.
• Improve governance, compliance, and audit readiness.
• Build scalable IAM capabilities rather than perform routine operational tasks.
• Possess an engineering and solution-oriented mindset.

Candidates with fewer years of experience but demonstrated success implementing or transforming IAM programs may be considered over individuals with extensive administrative experience.

Primary Responsibilities

• Develop and execute the enterprise Identity & Access Management (IAM) roadmap aligned with business and security objectives.
• Design and implement Identity Governance & Administration (IGA) solutions using Saviynt.
• Design, implement, and maintain Role-Based Access Control (RBAC) models and least-privilege access strategies.
• Develop identity lifecycle workflows for user onboarding, transfers, and offboarding.
• Build and maintain certification campaigns, access reviews, compliance reporting, and governance processes.
• Design and enhance authentication, authorization, Single Sign-On (SSO), and access control solutions.
• Integrate enterprise applications, directories, and identity providers into the IAM platform.
• Develop custom workflows, scripts, connectors, and automation to improve IAM operations.
• Monitor and respond to IAM-related security incidents and unauthorized access events.
• Serve as a subject matter expert during audits and regulatory assessments involving IAM, SOX, PII, and related compliance requirements.
• Partner closely with Cyber Security, Human Resources, business units, and technology teams to deliver secure and scalable IAM solutions.
• Identify opportunities to improve automation, governance, and operational efficiency across the IAM environment.

Required Qualifications

• Approximately 5+ years of Identity & Access Management experience (strong candidates with exceptional accomplishments may also be considered).
• Hands-on experience with Saviynt Identity Governance & Administration (IGA).
• Strong understanding of:
  • Identity lifecycle management
  • Role-Based Access Control (RBAC)
  • Least privilege principles
  • Access certifications
  • Identity governance
  • Workflow development
• Experience designing and implementing IAM workflows for onboarding, offboarding, and user lifecycle management.
• Experience developing custom scripts, connectors, or integrations for IAM platforms.
• Strong understanding of enterprise authorization models and organizational security structures.
• Experience integrating IAM solutions with enterprise applications, directories, and business systems.
• Experience securing enterprise reporting platforms and user privileges.
• Knowledge of SAP security concepts, including:
  • SAP authorization concepts
  • Portal security
  • Single Sign-On
  • Directory Services
  • Internet Transaction Server (ITS)
  • Web services security
• Experience with Governance, Risk & Compliance (GRC), Segregation of Duties (SoD), and access controls.
• Experience supporting compliance initiatives including:
  • SOX
  • NERC CIP
  • NIST
  • PCI
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication skills with both technical and business stakeholders.