> Markdown version of [/jobs/ext/2868917-system-engineer-ii](https://www.wearedevelopers.com/jobs/ext/2868917-system-engineer-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# System Engineer II

- **Company:** Deltek, Inc
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $86,500.0 - $152,500.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, System Configuration, Software Debugging, Linux, Federated Identity Management, Identity and Access Management, JSON, Python (Programming Language), Key Management, OAuth, OpenID, Windows PowerShell, Software Tools, Azure Active Directory, Security Assertion Markup Language (SAML), Session Management, SQL Databases, Systems Integration, User Provisioning Software, Scripting, Google Cloud, Enterprise Software Applications, Application Enhancement Tool, Microsoft Power Automate, Customer Identity Access Management, Virtual Agents, SailPoint, Restful APIs, Servicenow
- **Published:** September 12, 2026
- **Apply:** https://sjobs.brassring.com/TGnewUI/Search/home/HomeWithPreLoad?partnerid=25397&siteid=5259&PageType=JobDetails&jobid=623446

## About the Role

1. Strong understanding of IAM principles, including user lifecycle management, role-based access control (RBAC), least privilege, and segregation of duties (SoD), and PAM.

 2. 5+ years of hands-on IAM engineering experience, including deep, demonstrable expertise configuring and developing on Saviynt EIC (IGA).

 3. Demonstrated experience with enterprise-scale IAM implementations, ideally in organizations with hundreds of applications.

 4. Proficient with REST APIs, JSON, SQL, and scripting languages (e.g., PowerShell, Python, JavaScript).

 5. Experience conducting or supporting access certification campaigns, audit activities, and compliance-driven controls.

 6. Familiarity with application infrastructure and architecture (Windows/Linux, cloud platforms like Azure, AWS, GCP).

 7. Excellent troubleshooting, debugging, communication, and documentation skills.

 8. Ability to work independently and manage priorities in a fast-paced environment.

Preferred Qualifications

 1. Experience with PAM platforms, procedures, implementations, and best practices. (Privileged Access Management).

 2. Experience governing non-human and/or agentic (AI agent) identities and secrets management (e.g., Azure Key Vault).

 3. Knowledge of Active Directory, Azure AD, and identity federation technologies (SAML, OAuth, OIDC).

 4. Experience using AI tools and developing agents (e.g., Microsoft Copilot, Claude) to improve operational efficiency.

 5. Prior experience in regulated environments (e.g., SOX, HIPAA, GDPR).

 6. IAM certifications (e.g., CIAM, CISSP, Saviynt Certified Professional) are a plus.

 7. 5+ years of hands-on development experience with IGA, including configuration, workflows, and connector development.

 8. U.S. Citizenship is required for this position due to the sensitive nature of the identity and access systems supported and applicable regulatory/compliance obligations.

## Description

Identity Governance & Access Management / PAM

 1. Serve as the technical point of contact for all IGA implementation and development efforts.

 2. Assist in the design and development of IGA connectors and integrations with enterprise applications - SaaS, on-premise, and cloud.

 3. Build and configure certification campaigns in Saviynt (user access reviews, entitlement certifications, role certifications), including workflows and decision routing.

 4. Build and customize workflows, rules, roles, and policies in IGA to support provisioning, deprovisioning, and access reviews.

 5. Build reviewer hierarchies and delegation rules so the correct approvers are assigned automatically.

 6. Configure auto-remediation so revocations flow into connected systems (AD, SaaS apps) without manual execution.

 7. Extend governance into Privileged Access Management (PAM) - onboarding privileged accounts, vaults, and elevated entitlements into the same certification, workflow, and review model as standard access.

 8. Implement and operate PAM controls including credential vaulting, session management, just-in-time (JIT) elevation, and privileged session monitoring.

 9. Partners with security teams to reduce standing privilege and enforce least-privilege access across critical systems.

 10. Maintain the data quality behind certifications - identity correlation, role definitions, and application onboarding into Saviynt

Non-Human & Agentic Identity Governance

 1. Govern the full lifecycle of non-human identities (NHIs) - service accounts, machine identities, secrets, and API credentials - including discovery, ownership assignment, risk-tiering, and periodic recertification.

 2. Extend the identity governance plane to AI agents - registering agents, scoping least-privilege access via Saviynt, integrating with secrets management (e.g., Azure Key Vault), and enforcing runtime guardrails and approval gates.

 3. Help eliminate shadow agents and orphaned NHIs through continuous discovery, dormancy detection, and drift alerts.

Automation & AI-Driven Engineering

 4. Champion an automation-first approach - identifying manual identity and access processes that can be eliminated, self-serviced, or fully automated.

 5. Design and maintain automation using REST APIs, JSON, SQL, and scripting languages (PowerShell, Python, JavaScript).

 6. Leverage AI-powered tools and agents (e.g., Microsoft Copilot, Claude) to accelerate connector development, troubleshooting, documentation, and operational insights.

 7. Apply AI to enhance governance activities such as access reviews, anomaly detection, and reporting - including Saviynt's native AI/rapid-onboarding capabilities.

Compliance, Audit & Operations

 8. Support audit readiness and access attestation for regulatory and compliance frameworks (e.g., SOX, SOC 1 / SOC 2, NIST, FedRAMP).

 9. Maintain the data quality behind certifications - identity correlation, role definitions, and application onboarding.

 10. Own resolution of complex incidents and service requests through ITSM platforms (e.g., ServiceNow), ensuring SLA adherence, and mentor junior engineers on identity concepts and tooling.


## Related Videos

- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure)
- [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)