Senior IGA Engineer / SaaS Identity Governance & Administration (Saviynt) Engineer

About the role

The Senior IGA Engineer plays a key role in strengthening and protecting the nation's economic, financial, and payment systems by designing, developing, integrating, testing, deploying, and supporting enterprise Identity Governance & Administration (IGA) capabilities, with a focus on Saviynt EIC.

Responsibilities

• Design, configure, develop, test, deploy, and maintain Saviynt EIC solutions supporting enterprise IGA use cases.
• Build and enhance Joiner/Mover/Leaver (JML) lifecycle processes, birthright access, automated provisioning/deprovisioning, and termination controls.
• Configure and develop access request workflows, approval chains, entitlement governance, access policies, roles, user manager structures, and delegated administration.
• Develop and maintain access certification campaigns, reviewer logic, escalation paths, remediation workflows, and certification reporting.
• Onboard SaaS, cloud, database, directory, and enterprise applications using Saviynt connectors and custom integration patterns.
• Develop integrations using REST APIs, SCIM, JDBC/SQL, web services, file-based feeds, scripting, and other supported integration methods.
• Create and troubleshoot Saviynt workflows, rules, analytics, jobs, tasks, connection configurations, imports, provisioning actions, and technical controls.
• Implement and support Role-Based Access Control (RBAC), role engineering, entitlement structures, access policies, Segregation of Duties (SoD) controls, and least-privilege patterns.
• Diagnose complex identity data, provisioning, reconciliation, connector, API, workflow, and performance issues across non-production and production environments.
• Create reusable engineering patterns, technical documentation, configuration standards, runbooks, test evidence, and deployment procedures.
• Partner with IAM architecture, cybersecurity, application owners, infrastructure, HR, audit, and engineering teams to deliver end-to-end identity solutions.
• Participate in code/configuration reviews, release management, incident/problem management, root-cause analysis, and continuous platform improvement.
• Mentor engineers and provide technical leadership on Saviynt implementation patterns, troubleshooting, and engineering quality.

Requirements

• Hands-on Saviynt EIC development and configuration experience delivering production IGA capabilities at enterprise scale.
• Ability to independently develop, configure, test, troubleshoot, and support Saviynt—not solely gather requirements, administer campaigns, or provide program governance.
• Demonstrated experience building Saviynt application integrations and resolving connector, API, data mapping, reconciliation, import, and provisioning issues.
• Hands-on implementation of identity lifecycle automation, including JML events, account creation, access changes, deprovisioning, and termination processing.
• Hands-on experience with access requests, approval workflows, certifications, entitlement governance, and provisioning workflows.
• Strong REST API, JSON, SQL, and integration troubleshooting skills.
• Production support experience, including incident diagnosis, log analysis, root-cause analysis, defect remediation, and controlled releases.
• Strong understanding of IAM/IGA principles including least privilege, RBAC, SoD, access governance, authoritative sources, identity correlation, and lifecycle controls.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Engineering, or a closely related technical discipline or equivalent relevant experience.
• 5+ years of professional experience in IAM, IGA, security engineering, application integration, or related identity engineering disciplines.
• 2+ years of recent, hands-on Saviynt engineering/development experience, preferably with Saviynt EIC.
• Experience integrating heterogeneous applications, including SaaS applications, directories, databases, cloud platforms, and custom/internal systems.
• Proficiency with RESTful APIs, JSON, SQL, data transformations, authentication methods, and API troubleshooting tools.
• Experience with SCIM and common identity integration patterns; familiarity with LDAP/Active Directory concepts is expected.
• Experience with source-of-truth / authoritative identity feeds such as HR systems and with identity correlation and data quality remediation.
• Ability to analyze complex technical problems across identity data, IGA platform configuration, target applications, and downstream provisioning components.
• Experience working through software/engineering lifecycle activities: requirements refinement, design, build, test, peer review, deployment, documentation, and production support.
• Strong written and verbal communication skills with the ability to work effectively across security, engineering, application, audit, and business teams.