Sr Identity & Access Management Engineer (IAM)
Early Warning Services1 day ago
Base Salary
$108k - $149k/yr
Responsibilities
- Own the architecture, configuration, operations, maintenance, vulnerability management, and overall health of the Saviynt Enterprise Identity Cloud platform.
- Build and manage identity connectors and integrations across Active Directory, Entra ID, Okta, ServiceNow, Workday, SAP, cloud infrastructure, databases, and custom REST endpoints.
- Design and maintain access certification, attestation, segregation-of-duties, RBAC, ABAC, least-privilege, and just-in-time access controls.
- Automate joiner, mover, and leaver identity lifecycle processes, including provisioning, deprovisioning, and access reconciliation.
- Develop scripts, workflows, rules, analytics, reports, and integrations using Python, PowerShell, SQL, and related technologies.
- Plan and execute manual and automated testing for configurations, integrations, and workflows against functional, security, and compliance requirements.
- Lead root-cause analysis for provisioning failures, entitlement drift, and integration issues.
- Support audit, risk, and compliance activities, including control testing and evidence collection for SOX, PCI DSS, GLBA, and related obligations.
- Collaborate with architecture, security, application, business, audit, and technology stakeholders on IAM standards, delivery, and roadmap strategy.
- Participate in change control, business continuity, audit activities, and on-call rotation while mentoring junior systems engineers.
Requirements
- Bachelor’s degree in computer science, information technology, information systems, information assurance, cybersecurity, or a related field, or equivalent work experience.
- At least 5 years of progressive relevant identity and access management experience.
- At least 3 years of hands-on production experience with Saviynt Enterprise Identity Cloud or comparable enterprise IGA expertise transferable to Saviynt.
- Deep knowledge of identity governance, access certification, segregation of duties, RBAC, ABAC, entitlement management, least privilege, and identity lifecycle automation.
- Experience integrating IGA solutions with at least two platforms such as Active Directory, Entra ID, Okta, Workday, ServiceNow, and Amazon Web Services.
- Working knowledge of Python, PowerShell, SQL, REST, SOAP, JSON, XML, Groovy, and API testing tools such as Postman.
- Experience with directory services, authentication, federation, SAML, OIDC, OAuth, single sign-on, and multifactor authentication.
- Demonstrated manual and automated testing experience for integrations and workflows.
- Experience gathering and decomposing requirements, designing technical solutions, supporting regulated-environment audits, and owning solutions end to end.
- Preferred qualifications include financial services or fintech experience, Saviynt certification, exposure to SailPoint, Oracle Identity Manager, CyberArk, Delinea, or Okta, Microsoft Azure and AWS cloud experience, and knowledge of privileged access management.
- Experience with Active Directory PKI, key management, certificate authority platforms, Agile or SAFe delivery models, CMMI-aligned processes, or other IAM and information security certifications is preferred.
- Must be able to work independently, collaborate across teams, work in Windows and macOS environments, and complete a background and drug screen.
Benefits
- Hybrid work model with a primarily office-based, sedentary work environment.
- Medical, dental, and vision coverage, with company HSA contributions and flexible spending accounts.
- 401(k) retirement plan with a 100% company Safe Harbor match on the first 6% deferred, immediately upon eligibility.
- Flexible time off for exempt employees or generous PTO for non-exempt employees, plus 11 paid company holidays and one paid volunteer day.
- Twelve weeks of paid parental leave.
- Maven Family Planning support for fertility, adoption, surrogacy, pregnancy, postpartum, and related family-planning needs.
- Eligible employees may participate in a discretionary incentive plan.
About Early Warning Services
Early Warning Services builds payment networks and fraud/risk mitigation solutions for U.S. banks and credit unions. It operates the Zelle peer-to-peer payments network and is rolling out Paze, a digital wallet, alongside identity verification and account risk services. Headquartered in Scottsdale, Arizona, it is owned by a consortium of major U.S. banks and partners with thousands of financial institutions nationwide.