Saviynt IAM Staff Augmentation - Senior Identity & Access Management Engineer

Vytwo•Prosper, TX

118d•Onsite

About The Position

This role focuses on the end-to-end implementation, support, and engineering of Saviynt Identity Governance and Administration (IGA) solutions. The engineer will be responsible for designing and configuring various aspects of the Saviynt platform, including access request workflows, certifications, and role models. They will also develop and customize connectors, rules, and identity lifecycle processes, with a strong emphasis on hands-on experience with entitlements, roles, account ownership models, and segregation of duties (SOD). API integration and testing using REST/SOAP, JSON, and XML are key components of this role. The position also involves integrating Saviynt with various enterprise systems such as Active Directory/Azure AD, Okta/SSO platforms, Workday/HR systems, ServiceNow, and AWS/cloud platforms. Additionally, the role supports MFA, SSO, and Zero Trust architectures, as well as integration with Privileged Access Management (PAM) platforms and Active Directory engineering in hybrid environments. Enforcement of least privilege, just-in-time (JIT), and just-enough access (JEA) models, along with continuous monitoring of privileged accounts, are critical. The role also requires scripting and automation using PowerShell, Groovy, and SQL, CI/CD-aligned support for IAM deployments, and API-driven provisioning. Operational responsibilities include incident, request, and change management for IAM platforms, support for audit readiness and compliance frameworks, continuous improvement of access governance, and documentation.

Requirements

5+ years in Identity & Access Management engineering
3+ years hands-on with IGA platforms (Saviynt strongly preferred)
Deep expertise in identity governance concepts: certifications, roles, entitlements, and access controls
Strong integration background across enterprise and cloud systems
Experience with Saviynt EIC/EICaas solutions
Experience with access request workflows, certifications, and role models
Experience with connectors, rules, and identity lifecycle processes
Experience with entitlements, roles, account ownership models, and segregation of duties (SOD)
Experience with API integration and testing using REST/SOAP, JSON, XML
Experience integrating with Active Directory / Azure AD, Okta/SSO platforms, Workday/ HR systems, ServiceNow, AWS/cloud platforms
Experience with identity lifecycle management (joiner/mover/leaver) processes
Experience supporting MFA, SSO, and Zero Trust-aligned architectures
Experience supporting and integrating with Privileged Access Management (PAM) platforms
Experience with Active Directory engineering in hybrid environments (on-prem + cloud)
Experience enforcing least privilege, just-in-time (JIT), and just-enough access (JEA) models
Experience with continuous monitoring of privileged accounts and access risks
Scripting and automation using PowerShell, Groovy, SQL
CI/CD-aligned support for IAM deployments and enhancements
API-driven provisioning and system integration
Incident, request, and change management for IAM platforms
Support for audit readiness and compliance frameworks (e.g., SOX, PCI DSS)
Continuous improvement of access governance, analytics, and reporting
Documentation of architecture, configurations, and operational procedures

Responsibilities

End-to-end implementation and support of Saviynt EIC/EICaas solutions
Design and configuration of access request workflows, certifications (attestations), and role models
Development and customization of connectors, rules, and identity lifecycle processes
Hands-on experience with entitlements, roles, account ownership models, and segregation of duties (SOD)
API integration and testing using REST/SOAP, JSON, XML
Integration of Saviynt with enterprise systems such as Active Directory / Azure AD, Okta/SSO platforms, Workday/ HR systems, ServiceNow, AWS/cloud platforms
Implementation of identity lifecycle management (joiner/mover/leaver) processes
Support for MFA, SSO, and Zero Trust-aligned architectures
Support and integration with Privileged Access Management (PAM) platforms
Active Directory engineering in hybrid environments (on-prem + cloud)
Enforcement of least privilege, just-in-time (JIT), and just-enough access (JEA) models
Continuous monitoring of privileged accounts and access risks
Scripting and automation using PowerShell, Groovy, SQL
CI/CD-aligned support for IAM deployments and enhancements
API-driven provisioning and system integration
Ongoing incident, request, and change management for IAM platforms
Support for audit readiness and compliance frameworks (e.g., SOX, PCI DSS)
Continuous improvement of access governance, analytics, and reporting
Documentation of architecture, configurations, and operational procedures