> Markdown version of [/jobs/ext/3354520-principal-engineer-cybersecurity-iga-remote](https://www.wearedevelopers.com/jobs/ext/3354520-principal-engineer-cybersecurity-iga-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Engineer, Cybersecurity, IGA - Remote

- **Company:** Stryker Corporation
- **Location:** Salem, OR, United States
- **Experience:** Expert
- **Salary:** $135,600.0 - $225,900.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Microsoft Online Services, Cyber Security, Information Systems, Identity and Access Management, OAuth, Windows PowerShell, Role-Based Access Control, Openid Connect, Azure Active Directory, Security Assertion Markup Language (SAML), User Provisioning Software, Information Technology, SailPoint, Restful APIs
- **Published:** September 16, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3392082712&tx=YT606CYT&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline, or equivalent practical experience.
 * Minimum 8 years of experience in IT or cybersecurity.
 * Minimum 5 years of hands-on experience engineering and operating IGA or IAM environments.
 * Experience with SailPoint, Saviynt, or Microsoft Entra ID Governance, plus Active Directory and Microsoft Entra ID.
 * Experience with identity lifecycle management, provisioning and deprovisioning, access certification, RBAC, and segregation-of-duties enforcement.
 * Working knowledge of SAML, OAuth, OpenID Connect, and SCIM.
 * Experience with PowerShell, Microsoft Graph, or REST APIs., * SailPoint IdentityIQ or IdentityNow Engineer, Saviynt, Microsoft Certified: Identity and Access Administrator Associate (SC-300), or CISSP certification.

## Description

* Build, configure, and operate enterprise IGA platforms, including SailPoint, Saviynt, or Microsoft Entra ID Governance, with supporting directory and authentication services.
 * Engineer identity lifecycle workflows for joiners, movers, and leavers, including automated provisioning and deprovisioning.
 * Implement and maintain access requests, approval workflows, access certification and recertification campaigns, RBAC models, role mining, and segregation-of-duties rules.
 * Configure authoritative sources, identity reconciliation, and identity data quality remediation.
 * Implement SSO, MFA, federation, and risk-based authentication using SAML, OAuth, OpenID Connect, and SCIM.
 * Develop PowerShell, Microsoft Graph, REST API, and SCIM automations and integrations to onboard applications to IGA services.
 * Produce identity reporting, integration governance, and audit evidence for access-related controls.
 * Troubleshoot IGA, provisioning, and directory issues; maintain documentation; and execute IAM controls supporting SOX, HIPAA, ISO 27001, and NIST CSF compliance.

Knowledge and Capabilities:

 * Gather requirements from senior business, application, and infrastructure stakeholders and provide scope and architecture consultation.
 * Define, communicate, and embed enterprise identity governance standards, patterns, and controls with senior stakeholders.
 * Analyze complex identity issues, communicate technical concepts clearly, and maintain precise configuration and governance practices.