We are hiring a seasoned IAM Technical Architect to own the end-to-end technical solution on the Saviynt Enterprise Identity Cloud (EIC) platform and to lead a team of IAM Consultants and Senior IAM Consultants delivering Saviynt engagements out of India. Beyond deep, hands-on Saviynt platform mastery, this role requires strong Java engineering ability to extend the platform, hands-on command of the Saviynt Terraform provider to run identity configuration as code, and a working command of Saviynt's AI-powered Intelligence Suite so you can advise clients on where AI fits their IGA roadmap. You will be the final technical authority for your engagements and the primary technical mentor for your consulting team.
Role & Responsibilities:
Lead and manage a team of IAM Consultants and Senior IAM Consultants across Saviynt engagements - assigning work, reviewing configurations and connector code, and owning the technical quality of the team's deliverables.
Act as the primary technical escalation point and final design authority for Saviynt EIC solutions.
Architect and design end-to-end IGA solutions on the Saviynt EIC platform, aligned to enterprise security standards and business requirements.
Produce solution architecture artifacts - HLD, LLD, integration designs, data flow diagrams - and define technical standards, patterns, and best practices for the team.
Lead application onboarding onto Saviynt, including provisioning/de-provisioning, access request, and certification setup for target systems.
Design and configure Joiner - Mover - Leaver (JML) lifecycle workflows, birthright access, and automated provisioning rules.
Implement Access Request System (ARS), Access Certification / Access Reviews, Segregation of Duties (SoD), and preventive/detective controls.
Design and govern RBAC models, including role mining, role engineering, entitlement management, and role lifecycle.
Architect and develop custom connectors and platform extensions in Java - using Saviynt's connector framework/SDK and REST-Java based connectors - and extend workflows/rules using Java, Groovy, and JavaScript where out-of-the-box capability falls short.
Build and configure connectors to target systems (Active Directory, Azure AD / Entra ID, Workday, SAP, ServiceNow, databases, REST/SOAP APIs, SCIM, LDAP).
Configure Saviynt workflows, rules engine, analytics, control center, request forms, SAV roles, and email templates.
Define and own the organization's Infrastructure-as-Code strategy for Saviynt using the Saviynt Terraform provider - designing reusable Terraform modules for security systems, endpoints, connections, enterprise roles/entitlements, and job control resources, and establishing CI/CD, state management, and environment-promotion practices (dev/stage/prod).
Evaluate and advise clients on adopting Saviynt's AI-powered Intelligence Suite - Access/Identity Intelligence recommendations, ISPM for human and non-human identities/AI agents, and the Integration & Onboarding Agent - aligning adoption with client risk and compliance goals.
Lead performance tuning, troubleshooting, and remediation of the Saviynt platform and integrations.
Provide technical leadership and mentoring to Consultants and Senior Consultants; review code and configuration for quality and security.
Partner with security, compliance, audit, and business stakeholders to support regulatory requirements (SOX, GDPR, HIPAA, etc.) and audit evidence.
Support upgrade, migration, and platform modernization initiatives, including migration from legacy IGA tools to Saviynt.
Define and drive the IAM/IGA roadmap, contributing to Zero Trust and least-privilege strategies.
Skills:
8 - 12 years of overall IT experience with a strong focus on IAM/IGA, including proven experience leading and mentoring a team of consultants (2+ years in a technical lead/architect capacity).
6+ years of hands-on Saviynt experience, including architecture, design, and implementation on the EIC platform.
Deep expertise across Saviynt modules: Access Request, Access Certification, SoD, Role Management, application onboarding, connectors, workflows, rules, and analytics.
Strong hands-on Java development experience - core Java, Java-based custom connectors, Saviynt's connector SDK, and Groovy scripting - to build and extend Saviynt integrations beyond out-of-the-box capability.
Proven hands-on experience with the Saviynt Terraform provider - designing and maintaining Terraform resources (security systems, endpoints, connections/connectors, enterprise roles, entitlements, job control, transport packages) to manage Saviynt configuration as code across environments; strong general Terraform/HCL and CI/CD (Git, Jenkins/GitHub Actions/Azure DevOps) skills.
Solid working knowledge of Saviynt's AI-driven Intelligence Suite - Access/Identity Intelligence recommendations, ISPM for human and non-human/AI-agent identities, and the Integration & Onboarding Agent - with the ability to advise clients on adoption roadmaps.
Strong understanding of core IAM/IGA concepts: identity lifecycle, provisioning/de-provisioning, RBAC/ABAC, entitlement management, access governance, and least-privilege.
Experience integrating Saviynt with directory services and enterprise applications - AD, Azure AD/Entra ID, Workday, SAP, ServiceNow, and custom apps via APIs.
Working knowledge of authentication and federation protocols: SAML, OAuth 2.0, OIDC, SCIM, LDAP, Kerberos.
Familiarity with SSO, MFA, and PAM ecosystems, and how IGA integrates with them.
Solid grasp of security frameworks and compliance (SOX, GDPR, HIPAA, ISO 27001, NIST).
Proven experience leading solution design, documentation, and technical delivery in complex enterprise environments.