Sr. Saviynt IGA Engineer

Sr. Saviynt IGA Engineer

Summary

Senior SaaS IGA (Identity Governance and Administration) Engineer specializing in Access Certifications to help build and operate our client's identity-governance capability on Saviynt Enterprise Identity Cloud. This role will be responsible for the technical design and execution of access-certification campaigns, entitlement and reviewer governance, remediation, reconciliation, reporting, and certification controls across a complex enterprise environment.

Responsibilities

• Access Certification Design & Engineering:

• Design and configure Saviynt access-certification campaigns for users, accounts, entitlements, roles, applications, privileged access, and other in-scope access populations;

• Configure campaign scope, reviewer assignment, certification rules, review periods, reminders, escalations, delegation, reassignment, expiration, and completion criteria;

• Develop recurring and event-driven certification models appropriate to application risk and control requirements;

• Configure and validate manager, application-owner, entitlement-owner, role-owner, and other reviewer models;

• Establish certification logic for high-risk, privileged, sensitive, orphaned, dormant, temporary, and exception-based access;

• Support certification requirements across connected and, where necessary, disconnected applications;

• Design campaign segmentation so reviews are understandable and manageable rather than overwhelming reviewers with unnecessarily large certifications;

• Configure certification actions and downstream remediation, including revoke, retain, reassign, exception, and remediation workflows;

• Ensure certification decisions flow through provisioning/deprovisioning and are reconciled against actual target-system outcomes.

• Certification Governance & Control Effectiveness:

• Establish traceability from certification requirement to campaign, reviewer, decision, remediation, target-system validation, and evidence;

• Confirm entitlement and application ownership is accurate before campaigns launch and route ownership gaps for remediation;

• Ensure retained access has accountable reviewer decisions and appropriate justification;

• Verify revoked access is actually removed downstream; identify and escalate failed revocations and reconciliation discrepancies;

• Support risk-based certification frequency based on application, entitlement, privilege, regulatory, and business criticality;

• Support segregation-of-duties and high-risk-access reviews where applicable;

• Maintain certification evidence suitable for audit, risk, compliance, and control testing.

• Saviynt EIC Administration & Configuration:

• Saviynt EIC/IGA administrative configuration and production support;

• Access Certifications and Campaigns;

• Access Request System, Enterprise Roles, Entitlements, Workflows, Rules, and Policies;

• User, account, entitlement, and role metadata; dynamic attributes and ownership models;

• Saviynt jobs, job monitoring, analytics, reporting, REST APIs, and connector troubleshooting;

• Provisioning policies, reconciliation, application onboarding, and downstream remediation.

• Data Quality & Reconciliation:

• Analyze identity, account, entitlement, role, and ownership data before campaign launch;

• Identify duplicate, orphaned, dormant, stale, excessive, and unowned access;

• Validate identity-account correlation and application/entitlement ownership;

• Establish pre-campaign data-quality checks and post-campaign reconciliation;

• Validate successful downstream revocation and develop analytics for recurring certification or remediation failures.

• Reviewer Experience & Business Enablement:

• Partner with Product, Governance, UX/OCM, and business stakeholders so reviewers can quickly understand -

• Who has the access and what the access provides;

• Why the access exists and how it was originally obtained;

• Whether the access is privileged, sensitive, temporary, or high risk;

• When it was last reviewed, when it expires, and what happens if it is revoked;

• Certification design should reduce rubber-stamp behavior rather than merely increase campaign throughput.

• Production:

• Monitor scheduled certification jobs and campaign execution;

• Troubleshoot reviewer, data, application, campaign-generation, and remediation issues;

• Monitor certification aging, failed remediation, and recurring operational exceptions;

• Support incident/problem management, root-cause analysis, runbooks, and support documentation;

• Support release regression testing and assess Saviynt product releases for certification impacts;

• Support audit evidence requests and identify opportunities for automation and operational simplification.

Requirements

• The successful candidate will combine deep IAM/IGA experience with hands-on Saviynt expertise and an understanding that certification success is more than campaign completion; the objective is to ensure access decisions are meaningful, accountable, executed in downstream systems, reconciled, and auditable.
• 7-10+ years of IAM/Identity Security experience.
• 4+ years working with IGA platforms such as Saviynt, SailPoint, Oracle Identity Governance, One Identity, or comparable enterprise IGA technologies.
• 3+ years designing or operating access certifications/access reviews/attestation programs.
• Demonstrated experience implementing certification campaigns in a large, complex enterprise.
• Experience with entitlement governance, application ownership, role ownership, remediation workflows, and access-control evidence.
• Experience integrating IGA with Active Directory, Entra ID, REST APIs, databases, SaaS applications, and enterprise systems.
• Experience with application onboarding, provisioning, deprovisioning, and reconciliation.
• Technical Skills:
• Saviynt - EIC administration, Access Certifications, Access Request System, Enterprise Roles, Entitlements, workflows, analytics, jobs, rules/policies, REST APIs, connectors, provisioning, reconciliation.
• IGA/IAM - Identity lifecycle, access governance, RBAC/ABAC, least privilege, access reviews, entitlement governance, SoD, privileged-access governance, orphan/stale access, exceptions, audit evidence.
• Other - REST/JSON/APIs, SQL, Active Directory, Entra ID, authentication/authorization concepts, scripting or automation, data analysis, log analysis, ITSM integration.

Preferred

• 2-3+ years of direct Saviynt EIC experience strongly preferred.
• Experience supporting production IAM/IGA systems and working in regulated or highly controlled environments strongly preferred.
• Formal training in identity security, access governance, security controls, or risk management.
• Master's degree in Cybersecurity, Information Systems, Technology Management, Computer Science, or related field.

This is a 12-month Contract opportunity with our Kansas City, MO client. Low-cost employee benefits, paid time off, paid Holidays, and a 401(k) (with an immediately vested company match) are available with TriCom during the contract period. H-1B visa sponsorship is not available for this position. No third-parties, please.

#LI-JE1