Identity Governance and Administration Senior Engineer - AVP
Mitsubishi UFJ Financial Group2 days ago
Jersey City, NJ, USA or Tampa, FL, USASenior
Responsibilities
- Design, configure, build, test, and deploy IGA lifecycle, access request, certification, role, policy, segregation-of-duties, provisioning, and reconciliation capabilities.
- Implement and evidence identity controls including joiner-mover-leaver, birthright access, RBAC, access recertification, SoD checks, orphan and dormant account handling, privileged access, and non-human identity governance.
- Develop reusable access request forms, approval and fulfilment workflows, lifecycle events, rules, transforms, notifications, scheduled tasks, and API automations.
- Onboard applications and authoritative sources using connectors, web services, JDBC, LDAP, SCIM, aggregation, correlation, and entitlement modeling.
- Build and maintain bidirectional integrations between the IGA platform and ServiceNow for catalog, request, task, incident, problem, and change processes.
- Develop, secure, test, and support REST, SOAP, and SCIM integrations with HR, ITSM, PAM, directory, cloud, and data platforms.
- Monitor platform health, troubleshoot aggregation, provisioning, workflow, connector, and integration failures, perform root cause analysis, and implement permanent fixes.
- Support upgrades, patching, configuration management, environment promotion, disaster recovery readiness, release control, and change management.
- Produce audit evidence, reports, dashboards, certification campaigns, remediation tracking, and audit-ready control documentation.
- Maintain identity data quality, correlation, attribute mappings, technical designs, configuration standards, runbooks, knowledge articles, and test evidence.
- Collaborate with cross-functional stakeholders and vendors and coach junior engineers on IGA engineering practices.
Requirements
- 6–10 years of Identity and Access Management experience, including at least 4 years of hands-on IGA engineering experience in enterprise, multi-region environments.
- Deep knowledge of identity lifecycle, access requests, provisioning, reconciliation, access certification, RBAC, role mining or modeling, entitlement management, SoD, policy management, orphan and dormant accounts, and non-human identity governance.
- Hands-on experience with IGA platform architecture, connectors, application onboarding, aggregation, correlation, identity profiles, lifecycle states, transforms, rules, workflows, forms, certification campaigns, policies, reports, event triggers, and environment promotion.
- Experience integrating IGA with ServiceNow, including service catalog, record producers, variables, Flow Designer or IntegrationHub, scripted REST APIs, RITM and task fulfilment, incident, problem, and change processes.
- Strong REST/SOAP, SCIM, JSON, XML, OAuth, token-based authentication, Postman, and API troubleshooting experience.
- At least 5 years of process automation through scripting or coding, including Java, BeanShell, JavaScript, PowerShell and/or Python, plus SQL query writing.
- Familiarity with Git and CI/CD for controlled deployments and experience with production support, SDLC, release management, change management, ITSM, incident management, problem management, and SLAs.
- Knowledge of authentication, authorization, SSO, federation, SAML, OAuth 2.0, OpenID Connect, MFA, least privilege, SoD, Zero Trust, privileged access, directory services, cloud identity, and identity threats.
- Understanding of SOX, NIST, CRI, DORA, control testing, evidence collection, remediation, and regulated enterprise environments.
- Strong written and verbal communication, structured problem solving, ownership, attention to detail, independent working ability, and stakeholder communication skills.
- Bachelor’s degree in Computer Science or a closely related discipline, or relevant work experience.
- Preferred qualifications include IGA vendor certification, CISSP, CISM, CompTIA Security+, Microsoft SC-300, ServiceNow certification or development experience, PAM knowledge, cloud identity experience, AI-assisted security operations experience, and financial-services experience.
Benefits
- Hybrid schedule requiring four days per week at an MUFG office or client site and one remote day per week.
- Comprehensive health and wellness benefits, retirement plans, educational assistance, and training programs.
- Income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays.
- May be eligible for discretionary performance-based bonus and/or incentive compensation.
Tech Stack
Categories
About Mitsubishi UFJ Financial Group
Mitsubishi UFJ Financial Group is a publicly traded Japanese banking group headquartered in Chiyoda, Tokyo, offering commercial and investment banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing to consumers, corporations, and institutions. It generates revenue from lending interest, transaction fees, and investment services. Formed in 2005 through the merger of Mitsubishi Tokyo Financial Group and UFJ Holdings, MUFG operates globally across the Americas, EMEA, and Asia-Pacific markets.