Sr IAM Security Engineer

Milwaukee Tool•Menomonee Falls, WI

2d•Remote

About The Position

We are looking for a Senior IAM Security Engineer to own, operate, and continuously improve our Saviynt-based Identity Governance and Administration (IGA) platform. This role is ideal for an engineer who enjoys solving complex identity challenges, leading production support efforts, designing scalable integrations, and improving identity governance capabilities across the enterprise. You will serve as the primary technical owner of our Saviynt implementation, ensuring reliable identity lifecycle management, access governance, and integration with enterprise systems including Oracle, Active Directory, Entra ID, and other critical business applications. This role balances hands-on engineering, operational ownership, governance maturity, and technical leadership. Our IAM program is continuing to mature and expand. This role will play a critical part in improving platform reliability, reducing manual effort, strengthening governance controls, and enabling future identity initiatives and broader enterprise security capabilities.

Requirements

5+ years of hands-on experience in Identity and Access Management, Information Security, Platform Engineering, or related technical disciplines
3+ years of experience delivering Identity Governance and Administration (IGA) capabilities
Experience administering and supporting enterprise IAM platforms such as Saviynt, SailPoint, Okta, EmpowerID, or similar technologies
Strong troubleshooting and root cause analysis skills in complex production environments
Experience with identity lifecycle management, access provisioning, deprovisioning, and governance processes
Experience developing or supporting integrations utilizing REST APIs, SOAP services, JDBC connections, or similar technologies
Working knowledge of Active Directory, Entra ID, and enterprise authentication and authorization concepts
Experience with scripting or development technologies such as JavaScript, PowerShell, Python, Java, or similar languages
Experience working within change control, peer review, and production support processes
Strong written and verbal communication skills
Ability to work independently while effectively collaborating with cross-functional teams

Nice To Haves

Hands-on experience with Saviynt Enterprise Identity Cloud (EIC)
Experience integrating IAM platforms with Oracle Cloud, Oracle ERP, Oracle EBS, SAP, or similar enterprise systems
Experience with access certifications, role engineering, entitlement management, and Segregation of Duties controls
Experience with SAML, OAuth, OpenID Connect (OIDC), MFA, and Single Sign-On technologies
Experience supporting or integrating with Privileged Access Management (PAM) platforms such as Delinea, CyberArk, BeyondTrust, or similar solutions
Experience automating operational processes and improving platform observability
Familiarity with cloud identity and hybrid identity architectures
Security certifications such as CISSP, CISM, Security+, SSCP, or related credentials
Saviynt certifications or formal Saviynt implementation experience

Responsibilities

Own day-to-day operation, support, and reliability of the Saviynt platform
Troubleshoot and resolve provisioning, deprovisioning, reconciliation, and identity lifecycle failures across Oracle, Active Directory, Entra ID, and integrated applications
Serve as the primary escalation point for IAM operational incidents and complex access issues
Perform root cause analysis and implement long-term corrective actions to prevent recurring issues
Monitor platform health, job execution, provisioning success rates, and service performance
Develop and maintain operational runbooks, support documentation, and knowledge articles
Participate in production support processes, change control, peer reviews, and CAB activities
Design, build, enhance, and support Saviynt connectors, workflows, rules, policies, analytics, and certifications
Develop and maintain integrations utilizing REST APIs, SOAP services, JDBC connections, and other enterprise integration methods
Partner with application teams to onboard new applications and automate identity lifecycle processes
Support Oracle Cloud, Oracle ERP, Active Directory, Entra ID, and other enterprise identity integrations
Lead testing, validation, deployment, and upgrade activities for IAM platform enhancements
Ensure IAM solutions are scalable, maintainable, and aligned with enterprise security requirements
Support and improve Joiner, Mover, Leaver (JML) lifecycle processes
Implement and maintain access request workflows, approval processes, and entitlement management
Design, execute, and improve access certification campaigns and remediation activities
Contribute to role-based and attribute-based access models (RBAC/ABAC)
Support Segregation of Duties (SoD) controls, governance policies, and audit requirements
Assist with identity correlation, reconciliation, entitlement cleanup, and governance optimization efforts
Identify manual processes and develop automation solutions to improve efficiency and reliability
Improve platform observability, monitoring, reporting, and operational metrics
Develop dashboards and reporting that provide insight into platform health and governance effectiveness
Improve testing practices, deployment processes, and operational maturity
Drive continuous improvement initiatives focused on scalability, reliability, and user experience
Serve as the technical lead for IAM engagements involving application teams and business stakeholders
Guide technical design discussions and recommend IAM best practices
Conduct peer reviews and contribute to engineering standards and reusable implementation patterns
Mentor junior engineers and share knowledge across the IAM team
Communicate technical concepts, risks, and recommendations clearly to both technical and non-technical audiences
Balance security, operational stability, business requirements, and delivery timelines pragmatically
Partner with Infrastructure, Security Operations, Cloud, and Application teams to deliver integrated identity solutions
Support identity-related security incidents and remediation activities when required
Contribute to IAM strategy, roadmap discussions, and future platform enhancements
Assist with evaluation and adoption of new IAM technologies and capabilities