Senior Saviynt Engineer

Senior Saviynt Engineer

We are seeking a Senior SaaS IGA Engineer specializing in Access Certifications to help build and operate our MyAccess identity-governance capability on Saviynt Enterprise Identity Cloud. This role will be responsible for the technical design and execution of access-certification campaigns, entitlement and reviewer governance, remediation, reconciliation, reporting, and certification controls across a complex enterprise environment.

The successful candidate will combine deep IAM/IGA experience with hands-on Saviynt expertise and an understanding that certification success is more than campaign completion. The objective is to ensure access decisions are meaningful, accountable, executed in downstream systems, reconciled, and auditable.

Key Activities

Access Certification Design & Engineering

• Design and configure Saviynt access-certification campaigns for users, accounts, entitlements, roles, applications, privileged access, and other in-scope access populations.
• Configure campaign scope, reviewer assignment, certification rules, review periods, reminders, escalations, delegation, reassignment, expiration, and completion criteria.
• Develop recurring and event-driven certification models appropriate to application risk and control requirements.
• Configure and validate manager, application-owner, entitlement-owner, role-owner, and other reviewer models.
• Establish certification logic for high-risk, privileged, sensitive, orphaned, dormant, temporary, and exception-based access.
• Support certification requirements across connected and, where necessary, disconnected applications.
• Design campaign segmentation so reviews are understandable and manageable rather than overwhelming reviewers with unnecessarily large certifications.
• Configure certification actions and downstream remediation, including revoke, retain, reassign, exception, and remediation workflows.
• Ensure certification decisions flow through provisioning/deprovisioning and are reconciled against actual target-system outcomes.

Certification Governance & Control Effectiveness

• Establish traceability from certification requirement to campaign, reviewer, decision, remediation, target-system validation, and evidence.
• Confirm entitlement and application ownership is accurate before campaigns launch and route ownership gaps for remediation.
• Ensure retained access has accountable reviewer decisions and appropriate justification.
• Verify revoked access is actually removed downstream; identify and escalate failed revocations and reconciliation discrepancies.
• Support risk-based certification frequency based on application, entitlement, privilege, regulatory, and business criticality.
• Support segregation-of-duties and high-risk-access reviews where applicable.
• Maintain certification evidence suitable for audit, risk, compliance, and control testing.

Saviynt EIC Administration & Configuration

• Saviynt EIC / IGA administrative configuration and production support.
• Access Certifications and Campaigns.
• Access Request System, Enterprise Roles, Entitlements, Workflows, Rules, and Policies.
• User, account, entitlement, and role metadata; dynamic attributes and ownership models.
• Saviynt jobs, job monitoring, analytics, reporting, REST APIs, and connector troubleshooting.
• Provisioning policies, reconciliation, application onboarding, and downstream remediation.

Data Quality & Reconciliation

• Analyze identity, account, entitlement, role, and ownership data before campaign launch.
• Identify duplicate, orphaned, dormant, stale, excessive, and unowned access.
• Validate identity-account correlation and application / entitlement ownership.
• Establish pre-campaign data-quality checks and post-campaign reconciliation.
• Validate successful downstream revocation and develop analytics for recurring certification or remediation failures.

Reviewer Experience & Business Enablement

• Partner with Product, Governance, UX/OCM, and business stakeholders so reviewers can quickly understand:
• Who has the access and what the access provides.
• Why the access exists and how it was originally obtained.
• Whether the access is privileged, sensitive, temporary, or high risk.
• When it was last reviewed, when it expires, and what happens if it is revoked.
• Certification design should reduce rubber-stamp behavior rather than merely increase campaign throughput.

Production

• Monitor scheduled certification jobs and campaign execution.
• Troubleshoot reviewer, data, application, campaign-generation, and remediation issues.
• Monitor certification aging, failed remediation, and recurring operational exceptions.
• Support incident/problem management, root-cause analysis, runbooks, and support documentation.
• Support release regression testing and assess Saviynt product releases for certification impacts.
• Support audit evidence requests and identifies opportunities for automation and operational simplification.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Computer Engineering, Management Information Systems, or a closely related discipline; or equivalent combination of education and substantial relevant IAM/IGA experience.
• Master's degree in Cybersecurity, Information Systems, Technology Management, Computer Science, or related field preferred.
• Formal training in identity security, access governance, security controls, or risk management preferred.
• 7-10+ years of IAM / Identity Security experience.
• 4+ years working with IGA platforms such as Saviynt, SailPoint, Oracle Identity Governance, One Identity, or comparable enterprise IGA technologies.
• 2-3+ years of direct Saviynt EIC experience strongly preferred.
• 3+ years designing or operating access certifications / access reviews/ attestation programs.
• Demonstrated experience implementing certification campaigns in a large, complex enterprise.
• Experience with entitlement governance, application ownership, role ownership, remediation workflows, and access-control evidence.
• Experience supporting production IAM/IGA systems and working in regulated or highly controlled environments strongly preferred.
• Experience integrating IGA with Active Directory, Entra ID, REST APIs, databases, SaaS applications, and enterprise systems.
• Experience with application onboarding, provisioning, deprovisioning, and reconciliation.

Technical Skills

• Saviynt: EIC administration; Access Certifications; Access Request System; Enterprise Roles; Entitlements; workflows; analytics; jobs; rules/policies; REST APIs; connectors; provisioning; reconciliation.
• IGA / IAM: Identity lifecycle; access governance; RBAC/ABAC; least privilege; access reviews; entitlement governance; SoD; privileged-access governance; orphan/stale access; exceptions; audit evidence.
• Other: REST / JSON / APIs; SQL; Active Directory; Entra ID; authentication / authorization concepts; scripting or automation; data analysis; log analysis; ITSM integration.