Sr IAM Security Engineer
- Compensation
- Not disclosed
- Location
- Menomonee Falls, WI
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of hands-on experience in Identity and Access Management, Information Security, Platform Engineering, or related technical disciplines
- 3+ years of experience delivering Identity Governance and Administration (IGA) capabilities
- Experience administering and supporting enterprise IAM platforms such as Saviynt, SailPoint, Okta, EmpowerID, or similar technologies
- Strong troubleshooting and root cause analysis skills in complex production environments
- Experience with identity lifecycle management, access provisioning, deprovisioning, and governance processes
- Experience developing or supporting integrations utilizing REST APIs, SOAP services, JDBC connections, or similar technologies
- Working knowledge of Active Directory, Entra ID, and enterprise authentication and authorization concepts
- Experience with scripting or development technologies such as JavaScript, PowerShell, Python, Java, or similar languages
- Experience working within change control, peer review, and production support processes
- Strong written and verbal communication skills
- Ability to work independently while effectively collaborating with cross-functional teams
Nice to have
- Hands-on experience with Saviynt Enterprise Identity Cloud (EIC)
- Experience integrating IAM platforms with Oracle Cloud, Oracle ERP, Oracle EBS, SAP, or similar enterprise systems
- Experience with access certifications, role engineering, entitlement management, and Segregation of Duties controls
- Experience with SAML, OAuth, OpenID Connect (OIDC), MFA, and Single Sign-On technologies
- Experience supporting or integrating with Privileged Access Management (PAM) platforms such as Delinea, CyberArk, BeyondTrust, or similar solutions
- Experience automating operational processes and improving platform observability
- Familiarity with cloud identity and hybrid identity architectures
- Security certifications such as CISSP, CISM, Security+, SSCP, or related credentials
- Saviynt certifications or formal Saviynt implementation experience
Full description
Job Description:Applicants must be authorized to work in the U.S.; Sponsorship is not available for this position. This role can be Remote, Hybrid or Onsite
We are looking for a Senior IAM Security Engineer to own, operate, and continuously improve our Saviynt-based Identity Governance and Administration (IGA) platform. This role is ideal for an engineer who enjoys solving complex identity challenges, leading production support efforts, designing scalable integrations, and improving identity governance capabilities across the enterprise.
You will serve as the primary technical owner of our Saviynt implementation, ensuring reliable identity lifecycle management, access governance, and integration with enterprise systems including Oracle, Active Directory, Entra ID, and other critical business applications. This role balances hands-on engineering, operational ownership, governance maturity, and technical leadership.
Our IAM program is continuing to mature and expand. This role will play a critical part in improving platform reliability, reducing manual effort, strengthening governance controls, and enabling future identity initiatives and broader enterprise security capabilities.
Core Responsibilities:Operate and Own IAM Services (Primary)
- Own day-to-day operation, support, and reliability of the Saviynt platform
- Troubleshoot and resolve provisioning, deprovisioning, reconciliation, and identity lifecycle failures across Oracle, Active Directory, Entra ID, and integrated applications
- Serve as the primary escalation point for IAM operational incidents and complex access issues
- Perform root cause analysis and implement long-term corrective actions to prevent recurring issues
- Monitor platform health, job execution, provisioning success rates, and service performance
- Develop and maintain operational runbooks, support documentation, and knowledge articles
- Participate in production support processes, change control, peer reviews, and CAB activities
Engineer IAM Integrations and Platform Capabilities
- Design, build, enhance, and support Saviynt connectors, workflows, rules, policies, analytics, and certifications
- Develop and maintain integrations utilizing REST APIs, SOAP services, JDBC connections, and other enterprise integration methods
- Partner with application teams to onboard new applications and automate identity lifecycle processes
- Support Oracle Cloud, Oracle ERP, Active Directory, Entra ID, and other enterprise identity integrations
- Lead testing, validation, deployment, and upgrade activities for IAM platform enhancements
- Ensure IAM solutions are scalable, maintainable, and aligned with enterprise security requirements