Help build the identity foundation that keeps a global, fast-moving business secure. As an IGA Engineer, you’ll work at the intersection of security and engineering—automating identity lifecycle processes (Joiner/Mover/Leaver), improving access governance (RBAC/ABAC, certifications), and integrating critical applications across both on?prem and cloud environments.
You’ll collaborate daily with Information Security, Infrastructure, and Software Development teams, turning real business needs into scalable, audit-ready identity controls. This is a great role for someone who likes solving complex problems, writing clean automation, and improving systems with strong engineering discipline. You’ll also have the opportunity to influence platform maturity and standards, contribute to the roadmap, and mentor junior engineers as the program grows.
Responsibilities
- Engineer & operate IGA platforms: Design, implement, and maintain identity governance capabilities across directory and IGA tooling (e.g., Microsoft Entra ID/Active Directory, SailPoint/Saviynt) including provisioning/deprovisioning, policy enforcement, and access controls.
- Automation & integrations: Build Joiner/Mover/Leaver workflows and application integrations/connectors (SCIM/REST/JDBC) using scripting and APIs (e.g., PowerShell, Python, Microsoft Graph, Okta APIs) to enable scalable onboarding and identity events.
- Governance, compliance, and audit readiness: Implement and support access requests/approvals, access certifications, and evidence-ready controls; partner with GRC/Audit to align with SOX/NIST/GDPR and remediate findings.
- Operational excellence & support: Serve as an escalation point for complex identity issues, enhance monitoring/logging and troubleshooting, maintain runbooks/SOPs, and contribute to standards, documentation, and mentoring across the team.
Experience & Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
- 2+ years of hands-on IGA/IAM engineering experience in a complex enterprise environment (hybrid preferred).
- Working knowledge of directory services/LDAP, identity logging/monitoring, and CI/CD or controlled change/release processes; experience using GenAI coding assistance to improve engineering outcomes is a plus.
- Strong stakeholder communication skills, including the ability to document technical/architectural designs and explain identity concepts to non-technical audiences.
