Engineering, Cybersecurity, Identity Governance and Administration (IGA), Principal

Principal, Identity Governance and Administration (IGA) TPG has an exciting opportunity for an Identity Governance and Administration (IGA) Principal to join TPG's Cybersecurity team. The number one focus of this role is the ground-up redesign and ongoing maturity of the firm's IGA program. This is a hands-on, high-impact role for a senior practitioner who wants to shape an identity program rather than inherit one. TPG's Cybersecurity team protects the firm's applications, data, and clients across a fast-moving technology landscape. Identity is at the center of that mission — the firm's access management platform serves as the hub connecting every business application, and getting identity governance right is foundational to everything else we do. Principal Responsibilities Serve as a senior leader and subject-matter expert for the firm's IGA program, helping to drive its strategy, roadmap, and day-to-day operation Play a key role in the ground-up redesign of TPG's IGA program — partnering with our third-party advisory firm to reimagine identity tools, processes, and governance, and ensuring the resulting design reflects TPG's business requirement Lead the implementation or migration effort for the selected IGA platform, including solution design, configuration, application onboarding, connector and integration development, and cutover planning Design and operate core IGA processes — joiner/mover/leaver lifecycle management, access requests and approvals, access certifications and reviews, role-based access control and role mining, segregation of duties, and governance of privileged access Serve as a liaison between technical and business teams — communicating effectively with system owners, data owners, and business managers to gather requirements, resolve issues, and drive adoption of new identity processes Develop a deep understanding of the identity and access structure of each supported business application — most importantly Microsoft Entra ID — and integrate those applications into the IGA platform Automate identity lifecycle and governance workflows through scripting, APIs, and platform-native capabilities to reduce manual effort and error Define metrics, reporting, and key performance indicators that demonstrate program maturity, audit readiness, and risk reduction; support internal and external audit requests Mentor and develop junior members of the IGA team, and help build identity governance expertise across the broader Cybersecurity organization Contribute to enterprise identity and access management standards, policies, and governance documentation Requirements Minimum 5 years of experience focused on identity governance and administration Hands-on experience implementing and administering one or more enterprise IGA platforms (e.g., Saviynt, SailPoint), with experience leading a platform evaluation, migration, or greenfield deployment strongly valued Deep understanding of core identity governance concepts, including identity lifecycle management, provisioning and deprovisioning, access certification, role-based access control, and segregation of duties Strong working knowledge of Microsoft Entra ID and modern identity architectures, including federation and authentication standards such as SAML, OAuth 2.0, OpenID Connect, and SCIM Software programming or scripting experience (e.g., PowerShell, Python) and comfort working with REST APIs and application connectors Communicate effectively with system owners, data owners, business managers, and senior leadership — including the ability to explain identity risk to non-technical audiences and influence without direct authority Experience working with or managing third-party consultants, advisors, or implementation partners Be comfortable and capable swinging between efforts that are broad and strategic in scope to tasks that are tedious and require strict attention to detail Critically assess existing processes and systems, and drive constructive, evidence-based improvements while keeping current operations running Invite and provide evidence-based feedback in a timely and constructive manner Possess an ownership attitude as it relates to identifying errors, process inconsistencies, or security weaknesses Preferred Qualifications Bachelor's degree or higher in Computer Science, Information/Cyber Security, or a related field, or equivalent work experience Experience leading an IGA platform selection, replacement, or re-implementation, including RFP development and proof-of-concept evaluation Platform certifications such as Saviynt IGA Professional or SailPoint Identity Security certifications, or broader credentials such as CISSP, CISM, or CIAM Familiarity with privileged access management (PAM) tools and their integration with IGA platforms Experience securing cloud and SaaS identity environments (e.g., Microsoft 365, AWS, Azure) and integrating SaaS applications into governance workflows Experience in financial services or another regulated industry, including supporting SOX, SOC, or similar audit and compliance requirements TPG Careers Page