Principal Engineering Manager

This is a senior engineering and architecture leadership role responsible for the technical direction of an Identity Governance and Administration (IGA) practice. You’ll own end-to-end solution architecture across multiple identity engagements, from identity models and governance frameworks to integrations and migration strategies.

About the role

The role combines strategic leadership with hands-on technical oversight, giving you the opportunity to review and shape complex designs rather than simply manage teams. You’ll lead a distributed engineering organization, mentor technical talent, establish delivery standards, and ensure high-quality outcomes across concurrent client programs. You’ll work directly with IAM Directors, Enterprise Architects, and CISO organizations while influencing major identity and cybersecurity initiatives. The environment is fast-moving and entrepreneurial, with significant opportunities to contribute to presales, reusable engineering IP, vendor partnerships, and practice growth. This is an ideal opportunity for an experienced IAM/IGA leader who wants to combine technical authority, client impact, and engineering leadership.

Responsibilities

• Own end-to-end solution architecture for IGA engagements, including identity models, authoritative source strategies, account correlation, entitlement catalogs, and target governance operating models.
• Act as the technical design authority across a portfolio of engagements, reviewing and approving connector designs, lifecycle and provisioning workflows, RBAC/ABAC models, segregation-of-duties rules, and certification campaign architectures.
• Build and lead a distributed engineering bench, including staffing engineers across the US and Pune, technical mentoring, code and configuration quality reviews, and career development.
• Own migration strategies for legacy-to-modern IGA transformations, including coexistence planning, data migration, sequencing, and cutover execution.
• Design and oversee joiner-mover-leaver automation using HR authoritative sources such as Workday, SuccessFactors, and SAP HCM, including birthright access, contractor lifecycle, non-employee management, and emergency deprovisioning.
• Serve as a senior technical advisor to client IAM Directors, Enterprise Architects, and CISO organizations, leading architecture reviews and design authority sessions.
• Support business development and practice growth through solution shaping, effort estimation, technical SOW development, RFP/RFI responses, and proof-of-concept leadership.
• Establish delivery governance across engagements, managing technical risks, dependencies, technical debt, and go/no-go recommendations at key delivery gates.
• Develop and maintain reusable practice IP, including reference architectures, connectors, accelerators, estimation frameworks, and design pattern libraries.
• Maintain strong technical relationships with leading identity technology vendors and contribute to certification programs and strategic partner development.
• Drive innovation across the IGA practice by identifying opportunities to improve delivery methodologies, technical solutions, and client outcomes.

Requirements

• 8+ years of experience in IAM/IGA, including at least 4 years leading engineering or architecture teams within a professional services, systems integration, or managed services environment.
• Deep hands-on experience with at least two major identity platforms, such as SailPoint IdentityIQ/Identity Security Cloud, Saviynt EIC, Okta Identity Governance, or Microsoft Entra ID Governance.
• Demonstrated expertise in full identity lifecycle design, including joiner-mover-leaver processes, birthright access, role-based provisioning, access requests and approvals, delegated administration, deprovisioning, and orphan-account management.
• Strong access governance expertise spanning certification and recertification programs, segregation of duties, toxic-combination modeling, role mining, RBAC/ABAC, and entitlement risk assessment.
• Strong understanding of identity and security integration standards, including SCIM 2.0, SAML 2.0, OAuth 2.0/OIDC, LDAP, JWT, and legacy SPML-based integration patterns.
• Experience integrating identity platforms with enterprise environments such as Active Directory, Entra ID, LDAP, Workday, SAP, ServiceNow, Salesforce, databases, and mainframe/RACF systems.
• Knowledge of adjacent cybersecurity disciplines, including privileged access management, least privilege, zero standing privilege, identity attack paths, and identity threat detection and response.
• Experience with non-human, machine, and workload identity governance, including secrets and service-account lifecycle management.
• Exposure to PAM technologies such as CyberArk, Delinea, or BeyondTrust and their integration into broader IGA programs.
• Experience with complex identity transformation scenarios such as mergers and acquisitions, divestitures, multi-tenant environments, or multi-forest consolidation.
• Experience delivering security and identity programs in regulated industries such as financial services, healthcare, or the public sector.
• Relevant professional or vendor certifications, such as CISSP, CIMP/IDPro, SailPoint Certified Architect, Saviynt L400, or Okta Certified Consultant.
• Familiarity with identity security and governance frameworks and regulatory requirements, including SOX ITGC, HIPAA, PCI DSS, GDPR, NIST 800-53, and ISO 27001.
• Strong client-facing presence with the ability to communicate effectively with Director- and CISO-level stakeholders.
• Excellent estimation, scoping, written communication, problem-solving, and stakeholder management skills.
• Comfortable balancing strategic leadership with hands-on technical involvement and making sound architectural decisions in complex environments.

Benefits

• Competitive annual salary range of $200,000–$230,000 USD.
• Full-time employment opportunity with a growing technology and professional services organization.
• Remote position within the United States, offering flexibility in how and where you work.
• Opportunity to lead a distributed engineering organization and shape the direction of an expanding IGA practice.
• High-impact exposure to complex enterprise identity, cybersecurity, and digital transformation initiatives.
• Significant opportunities for technical leadership, client engagement, mentoring, and professional growth.
• Exposure to major identity and security technology ecosystems and strategic vendor partnerships.
• Opportunities to contribute to reusable intellectual property, engineering accelerators, and innovative delivery methodologies.
• Collaborative environment focused on innovation, continuous learning, inclusion, and professional development.
• Opportunity to work directly with senior client stakeholders, including IAM leaders, enterprise architects, and CISO organizations.