Saviynt Architect

• Saviynt Connector Configuration: Configure and integrate diverse Saviynt connectors (Active Directory, LDAP, Cloud AD, UNIX, and others) to support robust account reconciliation, access provisioning, password management, and user certification processes.
• Identity Lifecycle & Web SSO: Engineer identity lifecycle and access management solutions, including Web SSO group automation, entitlement provisioning, and self-service workflows aligned with role-based access control (RBAC) models.
• Custom Tooling & UI Modernization: Rebuild custom IIQ front-end experiences (access request portals, external user onboarding) using modern UI frameworks, decoupled from IIQ and integrated with Saviynt APIs. Build SSO and identity utilities, including bulk user lookup tools, helpdesk SSO utilities, and self-service portals featuring MFA birthright provisioning.

Migration, Architecture & Logic Porting

• Deconstruct Legacy IIQ: Deep-dive into a heavily customized SailPoint IIQ implementation-including custom workflows, rules, REST services, and bespoke front-end components-to define functional mapping and a robust migration strategy to Saviynt.
• Logic Translation: Lead the porting of IIQ-specific logic into Saviynt EIC. Translate legacy Java/Beanshell-based workflows, RBAC models, and provisioning logic into native Saviynt configurations, event-driven workflows, and microservice-based integrations.

Orchestration Refactoring: Refactor and optimize identity lifecycle orchestration (Joiner-Mover-Leaver, certifications, SoD, and provisioning) to eliminate legacy IIQ dependencies and establish a scalable, API-driven architecture centered on Saviynt

Do you have experience in SSO?

$70 - $75 an hour - Contract