Sr Systems Engineer - IAM

Experteer Overview In this role, you will own and evolve the Saviynt Enterprise Identity Cloud platform to govern access across a regulated financial tech environment. You’ll work within the Identity Platform Engineering team to design, deploy, and operate IdAM capabilities, driving security, compliance, and efficiency. You’ll partner with audit, risk, and cross-functional teams to implement robust identity controls and lifecycle management. This is a hands-on, design-to-ops role with a focus on impact and modernization. Compensation / Benefits * Own the Saviynt EIC platform architecture, config, and operations including access lifecycle and certification modules * Maintain platform health and security through patching, vulnerability management, and threat monitoring * Develop connectors to directories and cloud apps (AD, Entra ID, Okta, ServiceNow, Workday, SAP) and custom REST endpoints * Automate tasks with PowerShell, Python, and other scripts to extend platform capabilities * Design and maintain identity governance controls (SoD, RBAC/ABAC, least privilege) and automate lifecycle (joiner/mover/leaver) processes * Implement just-in-time access and enforce least privilege without impacting productivity * Develop workflows, analytics, and reporting to detect access risk and drive remediation * Collaborate with internal audit, risk, and compliance on control testing and evidence for SOX/PCI DSS/GLBA * Plan and validate solutions with manual and automated testing before releases * Mentor junior engineers and contribute to identity roadmap and modernization opportunities Tasks * Bachelor’s degree in a related field or equivalent work experience * 5+ years in identity and access management with hands-on IGA platform experience * 3+ years with Saviynt Enterprise Identity Cloud (or equivalent) in production * Deep knowledge of identity governance concepts including attestations, SoD, RBAC/ABAC, entitlement management, and least privilege * Strong scripting and integration skills (Python, PowerShell, SQL, REST) * Experience with SSO, MFA, authentication/federation (SAML, OIDC, OAuth) * Proven ability to design automated identity lifecycle processes across heterogeneous systems * Experience supporting audit and regulatory compliance in financial services * Ability to work independently in a dynamic environment and manage priorities * Windows and macOS familiarity * Background check and drug screen Key requirements * Healthcare coverage * 401(k) with company match * Paid time off and holidays * Paid parental leave * Maven Family Planning * Discretionary incentive plan

field and maintain identity governance controls (SoD, RBAC/ABAC, least privilege) and automate lifecycle (joiner/mover/leaver) processes * Implement just-in-time access and enforce least privilege without impacting productivity * Develop workflows, analytics, and reporting to detect access risk and drive remediation * Collaborate with internal audit, risk, and compliance on control testing and evidence for SOX/PCI DSS/GLBA * Plan and validate solutions with manual and automated testing before releases * Mentor junior engineers and contribute to identity roadmap and modernization opportunities Tasks * Bachelor’s degree in a related field or equivalent work experience * 5+ years in identity and access management with hands-on IGA platform experience * 3+ years with Saviynt Enterprise Identity Cloud (or equivalent) in production * Deep knowledge of identity governance concepts including attestations, SoD, RBAC/ABAC, entitlement management, and least privilege * Strong scripting and aaaaaaaaa on skills (Python, PowerShell, SQL, REST) * Experience with SSO, MFA, authentication/federation (SAML, OIDC, OAuth) * Proven ability to design automated identity lifecycle processes across heterogeneous systems * Experience supporting audit and regulatory compliance in financial services * Ability to work independently in a dynamic environment and manage priorities * Windows and macOS familiarity * Background check and drug screen Key requirements * Healthcare coverage * 401(k) with company match * Paid time off and holidays * Paid parental leave * Maven Family Planning * Discretionary incentive plan