Base Salary
$180k - $200k/yr
Responsibilities
- Build and extend configured and custom IGA connectors across SCIM, REST, SOAP, JDBC, LDAP, PowerShell, and flat-file integration patterns.
- Develop identity lifecycle workflows, provisioning and deprovisioning policies, birthright access rules, and platform-specific rules and jobs.
- Implement access request catalogs, approval and escalation workflows, and access certification campaigns with closed-loop revocation.
- Build aggregation, correlation, entitlement normalization, data-quality, and role-mining pipelines.
- Integrate IGA platforms with ServiceNow, Workday, SuccessFactors, directories, and authentication systems.
- Configure SAML and OIDC application onboarding, MFA, adaptive access policies, and directory integrations.
- Write unit and integration tests, participate in peer code reviews, and maintain deployment artifacts.
- Support UAT, defect triage, root-cause analysis, cutover, and hypercare through defect closure.
- Create build documentation, configuration records, and knowledge-transfer materials for clients.
- Contribute reusable connectors and accelerators to the practice IP library.
Requirements
- A vendor certification such as SailPoint Certified Engineer, Saviynt L200/L300, Okta Certified Developer, or an industry equivalent.
- Experience with cloud identity services on Azure, AWS, or GCP and basic Kubernetes and containerized deployment knowledge.
- Exposure to PAM integration using CyberArk or Delinea, or to ITDR/ISPM tooling.
- Experience with specialized targets such as SAP GRC, mainframe/RACF, Epic, Cerner, or core banking platforms.
- Experience with a legacy-to-modern IGA migration.
- Experience delivering platforms in regulated environments such as FedRAMP, HITRUST, or PCI-scoped estates.
- 6–8+ years of software engineering experience, including at least 4 years building on IGA/IAM platforms.
- Hands-on connector and workflow development on at least one of SailPoint IdentityIQ/ISC, Saviynt EIC, Okta, or Microsoft Entra ID.
- Strong Java including BeanShell, .NET, and/or Python and PowerShell, with solid SQL experience against identity and entitlement data.
- Experience integrating REST and SOAP APIs, SCIM provisioning, LDAP, and Active Directory schemas.
- Understanding of identity lifecycle, entitlements, roles, aggregation, correlation, access requests, certification, orphan accounts, and dormant accounts.
- Understanding of SAML, OAuth, and OIDC flows, token handling, and application onboarding.
- Knowledge of secrets and credential handling, secure coding against the OWASP Top 10, TLS, certificate basics, and secure connector permissions.
- Experience with Git-based workflows and CI/CD-driven delivery.
- Clear written English for design notes, defect records, and client-facing documentation.
Benefits
- Full-time opportunity with Gruve.
- Collaborative culture focused on innovation and continuous learning.
- Commitment to diversity and inclusion.
Tech Stack
About Gruve
Gruve was founded on the premise that new technologies in Machine Learning, Data Sciences, Artificial Intelligence, and Software Development are transforming Enterprise Services. Our goal is to harness these advancements to deliver services with superior efficiency and tangible outcomes. Our Team Our team is built with a strong background in Software and Services, united by a shared sense of Purpose: to achieve the best outcomes for our clients. We value all our stakeholders, recognizing that People are our most important assets. We adopt a Process framework that ensures the delivery of high-quality results every time. What Sets Us Apart Our differentiation is straightforward: we genuinely care, we innovate, we disrupt, and we work hard. Our Core Values: Customer Success: Putting customers first. Positive Feedback Loop: Embracing continuous improvement. Pursuit & Persevere: Staying resilient and ambitious. Integrity and Ethics: Acting with honesty and ethics. Team & Trust: Collaborating with trust and respect. Giving Back: Committing to community and responsibility. Gruve is Norwegian for "To Mine or Mining Activity"