Principal Engineer – Identity Governance & Administration (IGA)
NXP SemiconductorsResponsibilities
- Own the architecture, technical standards, engineering patterns, and roadmap for enterprise Identity Governance & Administration capabilities.
- Design and implement identity lifecycle, Joiner/Mover/Leaver, access request, approval, certification, review, role, entitlement, policy, and Segregation of Duties workflows.
- Build scalable RBAC, ABAC, and policy-based access models across thousands of applications.
- Define governance models for human, privileged, non-human, service, application, API, RPA, and AI agent identities.
- Evaluate, select, implement, and operate enterprise IGA platforms including SailPoint, Saviynt, or equivalent solutions.
- Engineer integrations with HR systems, directories, IAM platforms, AWS, Azure, GCP, enterprise applications, and SaaS applications.
- Embed least privilege, continuous governance, auditability, and Zero Trust principles into access models.
- Identify and remediate access sprawl, toxic combinations, orphaned entitlements, dormant access, and excessive blast radius.
- Increase automation, maintain knowledge continuity, mentor senior engineers, and make long-term architectural tradeoffs.
Requirements
- 10+ years of experience in Identity and Access Management with deep specialization in Identity Governance and Administration.
- Expert-level hands-on experience with SailPoint IdentityIQ, SailPoint IdentityNow, Saviynt, or comparable enterprise IGA platforms.
- Proven experience designing and operating enterprise-scale identity governance platforms.
- Strong knowledge of identity lifecycle management, access governance and certification models, RBAC, ABAC, policy-driven access control, SoD enforcement, and Zero Trust security architecture.
- Experience integrating IGA platforms with HR systems, directories, IAM platforms, cloud platforms, and SaaS applications.
- Strong understanding of APIs, integrations, and distributed systems.
- Ability to design governance solutions for global enterprises and exercise strong systems thinking and long-term architectural judgment.
- Ability to influence architecture and standards without formal authority and operate in ambiguous, high-impact problem spaces.
- Preferred experience with global identity ecosystems, cloud identity governance across AWS, Azure, and/or GCP, security architecture, platform engineering, large-scale SaaS systems, privileged access governance, non-human identity risk, and GRC, audit, and compliance partnerships.
Tech Stack
Categories
About NXP Semiconductors
We anticipate tomorrow’s needs—navigating a changing world by bringing together technology's brightest minds to build game-changing solutions that propel us forward. NXP Semiconductors N.V. (NASDAQ: NXPI) is the trusted partner for innovative solutions in the automotive, industrial & IoT, mobile, and communications infrastructure markets. NXP's "Brighter Together" approach combines leading-edge technology with pioneering people to develop system solutions that make the connected world better, safer, and more secure. The company has operations in more than 30 countries and posted revenue of $12.61 billion in 2024. Find out more at www.nxp.com. Career Development Opportunities : Bright Minds. Bright Futures. We believe that a key component to growing our business is to develop our people. To enable you to grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills. Commitment At NXP. We recognize NXP is a powerful change agent as we continue to deliver innovative solutions that advance a more sustainable future. We remain steadfast in our commitment to sustainability and making measurable year-on-year progress. Also, we aim to create an inclusive work environment and we will not tolerate racism, discrimination or harassment of any kind. We have programs in place focused on diversity, inclusion and equality. Privacy Policy: https://www.nxp.com/company/about-nxp/privacy-policy-for-social-media-pages:PRIVACY-POLICY-SOCIAL-MEDIA