Senior Software Engineer

Responsibilities

• Build and extend configured and custom IGA connectors across SCIM, REST, SOAP, JDBC, LDAP, PowerShell, and flat-file integration patterns.
• Develop identity lifecycle workflows, provisioning and deprovisioning policies, birthright access rules, and platform-specific rules and jobs.
• Implement access request catalogs, approval and escalation workflows, and access certification campaigns with closed-loop revocation.
• Build aggregation, correlation, entitlement normalization, data-quality, and role-mining pipelines.
• Integrate IGA platforms with ServiceNow, Workday, SuccessFactors, directories, and authentication systems.
• Configure SAML and OIDC application onboarding, MFA, adaptive access policies, and directory integrations.
• Write unit and integration tests, participate in peer code reviews, and maintain deployment artifacts.
• Support UAT, defect triage, root-cause analysis, cutover, and hypercare through defect closure.
• Create build documentation, configuration records, and knowledge-transfer materials for clients.
• Contribute reusable connectors and accelerators to the practice IP library.

Requirements

• A vendor certification such as SailPoint Certified Engineer, Saviynt L200/L300, Okta Certified Developer, or an industry equivalent.
• Experience with cloud identity services on Azure, AWS, or GCP and basic Kubernetes and containerized deployment knowledge.
• Exposure to PAM integration using CyberArk or Delinea, or to ITDR/ISPM tooling.
• Experience with specialized targets such as SAP GRC, mainframe/RACF, Epic, Cerner, or core banking platforms.
• Experience with a legacy-to-modern IGA migration.
• Experience delivering platforms in regulated environments such as FedRAMP, HITRUST, or PCI-scoped estates.
• 6–8+ years of software engineering experience, including at least 4 years building on IGA/IAM platforms.
• Hands-on connector and workflow development on at least one of SailPoint IdentityIQ/ISC, Saviynt EIC, Okta, or Microsoft Entra ID.
• Strong Java including BeanShell, .NET, and/or Python and PowerShell, with solid SQL experience against identity and entitlement data.
• Experience integrating REST and SOAP APIs, SCIM provisioning, LDAP, and Active Directory schemas.
• Understanding of identity lifecycle, entitlements, roles, aggregation, correlation, access requests, certification, orphan accounts, and dormant accounts.
• Understanding of SAML, OAuth, and OIDC flows, token handling, and application onboarding.
• Knowledge of secrets and credential handling, secure coding against the OWASP Top 10, TLS, certificate basics, and secure connector permissions.
• Experience with Git-based workflows and CI/CD-driven delivery.
• Clear written English for design notes, defect records, and client-facing documentation.

Benefits

• Full-time opportunity with Gruve.
• Collaborative culture focused on innovation and continuous learning.
• Commitment to diversity and inclusion.