Identity Engineer / Technical Lead

Senior Identity Governance Engineer / Technical Lead to join a large enterprise Identity and Access Management (IAM) transformation program., * Provide hands-on engineering, configuration, administration, and troubleshooting support for an enterprise IGA environment.

• Configure and maintain workflows, lifecycle events, policies, access certifications, roles, access requests, and provisioning processes.
• Develop and maintain application integrations and connectors.
• Onboard enterprise applications and systems into the identity governance environment.
• Troubleshoot provisioning, aggregation, workflow, connector, and identity-data issues.
• Develop and maintain platform customizations using Java, scripting, APIs, workflows, and rules.
• Work with application owners, infrastructure teams, security teams, and IAM stakeholders to resolve identity and access-related issues.
• Analyze existing configurations and recommend improvements to scalability, reliability, security, and operational efficiency.
• Assist with automation of repetitive IAM processes.
• Document configurations, integrations, technical procedures, and operational processes.
• Participate in architecture and design discussions related to the evolution of the IAM environment.
• Serve as a technical escalation point for complex IGA issues and provide technical guidance to other engineers., This is a hybrid position with an expectation of being onsite approximately three days per week.

The role will work closely with IAM, cybersecurity, infrastructure, application, and enterprise technology teams in a large enterprise environment with a significant and continually expanding application portfolio.

The successful candidate will be a strong identity governance engineer first, with the technical perspective to help the organization improve its current environment and prepare for its longer-term identity strategy.

This is a hands-on engineering role focused on supporting, enhancing, and expanding an existing on-premises, enterprise-grade Identity Governance and Administration (IGA) platform. The ideal candidate will have strong experience with IGA platform engineering, application onboarding, integrations, provisioning, workflows, troubleshooting, and identity governance processes.

The immediate priority is supporting and improving the existing on-premises platform. While the organization anticipates that cloud-based (SaaS) identity governance may become part of its longer-term strategy, this is not a cloud migration role today. Experience with SaaS IGA platforms is a plus, but deep, hands-on on-premises IGA engineering experience is the primary requirement., * 5+ years of hands-on engineering experience with an enterprise IGA platform.

• Hands-on experience with leading identity and security platforms such as SailPoint, CyberArk, or comparable enterprise IAM/IGA products.
• Strong experience supporting and engineering on-premises IGA environments.
• Experience with application onboarding and connector development/configuration.
• Strong understanding of Identity Governance and Administration (IGA) concepts.
• Experience with identity lifecycle management, provisioning, access requests, certifications, roles, policies, and workflows.
• Strong troubleshooting and problem-solving skills within complex identity environments.
• Experience integrating identity governance platforms with enterprise applications and infrastructure.
• Strong understanding of Active Directory, LDAP, databases, and enterprise identity environments.
• Understanding of IAM, authentication, authorization, and access-control concepts.
• Experience working in large, complex enterprise environments.
• Ability to work independently while collaborating with IAM, cybersecurity, infrastructure, application, and other technology teams.

Preferred Qualifications

• Industry or vendor certifications in identity governance or privileged access management.
• Experience with cloud-based (SaaS) identity governance platforms.
• Experience evaluating or planning an on-premises-to-cloud IGA migration.
• Experience modernizing legacy IGA implementations and reducing technical debt.
• Experience with API-driven integrations.
• Experience with cloud IAM or identity security platforms.
• Experience integrating identity governance with PAM, SSO, MFA, or other enterprise security technologies.
• Experience in financial services, utilities, critical infrastructure, or similarly complex and highly regulated environments.
• Previous experience serving as a technical lead or senior engineer.