Senior IGA Engineer / SaaS Identity Governance & Administration (Saviynt) Engineer
RB (Reckitt Benckiser)5 days ago
Boston, MA, USA +11 moreSenior
Base Salary
$120k - $192k/yr
Responsibilities
- Design, configure, develop, test, deploy, maintain, and support Saviynt EIC solutions for enterprise IGA use cases.
- Build identity lifecycle automation, including joiner/mover/leaver processes, birthright access, provisioning, deprovisioning, and termination controls.
- Develop access request workflows, approval chains, certifications, entitlement governance, roles, access policies, and delegated administration capabilities.
- Onboard SaaS, cloud, database, directory, and enterprise applications using Saviynt connectors and custom integration patterns.
- Develop and troubleshoot integrations using REST APIs, SCIM, JDBC/SQL, web services, file-based feeds, scripting, and supported integration methods.
- Implement RBAC, role engineering, entitlement structures, segregation-of-duties controls, and least-privilege patterns.
- Diagnose identity data, provisioning, reconciliation, connector, API, workflow, and performance issues across production and non-production environments.
- Create reusable engineering patterns, documentation, runbooks, test evidence, configuration standards, and deployment procedures.
- Participate in code and configuration reviews, release management, incident and problem management, root-cause analysis, and platform improvement.
- Provide technical leadership and mentorship on Saviynt implementation, troubleshooting, and engineering quality.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Engineering, or a closely related technical discipline, or equivalent relevant experience.
- At least 5 years of professional experience in IAM, IGA, security engineering, application integration, or related identity engineering disciplines.
- At least 2 years of recent hands-on Saviynt engineering or development experience, preferably with Saviynt EIC.
- Hands-on experience developing, configuring, testing, troubleshooting, and supporting production Saviynt IGA capabilities and application integrations.
- Experience with identity lifecycle automation, access requests, approval workflows, certifications, entitlement governance, provisioning, connectors, reconciliation, and data mapping.
- Strong experience with RESTful APIs, JSON, SQL, data transformations, authentication methods, and API troubleshooting.
- Experience with SCIM, LDAP/Active Directory concepts, authoritative identity feeds, identity correlation, and data quality remediation.
- Production support experience involving incident diagnosis, log analysis, root-cause analysis, defect remediation, and controlled releases.
- Understanding of IAM/IGA principles including least privilege, RBAC, segregation of duties, authoritative sources, identity correlation, and lifecycle controls.
- Experience across requirements refinement, design, development, testing, peer review, deployment, documentation, and production support.
- Preferred qualifications include Saviynt certification or formal training, SailPoint experience, cloud identity integrations, Workday or other HR platform integrations, PAM, service identities, role engineering, access modeling, audit-driven controls, and complex application onboarding leadership.
- Experience with Java, Groovy, Python, PowerShell, or comparable scripting and programming languages is preferred.
Benefits
- Medical, dental, vision, flexible spending accounts, backup child care, paid family care leave, vacation, sick days, paid holidays, pet insurance, matching 401(k), and retirement/pension benefits.
- Full-time, regular position requiring onsite work within reasonable commuting distance of the employing Reserve Bank.
- Eligible hiring locations include Boston, New York, Philadelphia, Cleveland, Richmond, Atlanta, Chicago, St. Louis, Minneapolis, Kansas City, Dallas, and San Francisco; San Francisco and Richmond are preferred.