Identity Access Management & Governance Lead

Identity Access Management & Governance Lead

Location: Lutz, FL (Hybrid)
Contract Length: 6 months
Position Type: Contract W2 Only 
Experience Required: 5–8 years of related cybersecurity or IT experience

Position Overview

We are seeking an experienced Identity Governance and Administration (IGA) Lead to oversee and enhance the enterprise identity governance program using the Saviynt platform. This role combines hands-on technical expertise with identity governance leadership, focusing on identity lifecycle management, role-based access control (RBAC), entitlement governance, and access certification.

The successful candidate will work closely with Identity and Access Management (IAM), Privileged Access Management (PAM), application owners, compliance, risk, and enterprise architecture teams to enforce least-privilege access, support regulatory requirements, and improve visibility into user and non-human identities across the enterprise.

This position requires strong hands-on experience configuring and operating Saviynt, integrating enterprise applications, developing governance workflows, and supporting audit and compliance activities.

Key Responsibilities

Identity Governance & Administration (IGA)

• Serve as the technical lead and subject-matter expert for the enterprise Saviynt IGA platform.

• Design, implement, and maintain role-based access control (RBAC) models, enterprise role catalogs, technical and business roles, and entitlement hierarchies.

• Configure and manage birthright, request-based, and exception-based access provisioning through Saviynt Access Request and workflow capabilities.

• Develop and maintain periodic access certification and attestation campaigns covering users, roles, entitlements, and privileged access.

• Configure multi-stage approval workflows, risk-based approval logic, and integrations with ServiceNow for access requests and approvals.

• Lead application onboarding into Saviynt in collaboration with IAM, PAM, and application subject-matter experts.

• Coordinate application modeling, entitlement discovery and normalization, access request design, and certification configuration.

Enterprise Integrations

• Design and maintain Saviynt integrations with enterprise identity and application platforms, including:

  • Microsoft Entra ID for user lifecycle management, group governance, and SSO alignment.

  • CyberArk for privileged account governance and certifications.

  • ServiceNow for access requests, approvals, and fulfillment workflows.

  • SAP and other enterprise or custom applications.

• Collaborate with technical teams and application owners to improve identity governance coverage and integration effectiveness.

Access Risk & Compliance

• Implement and maintain segregation of duties (SoD) policies, risk scoring, and access risk analysis.

• Configure policy-based access alerts, flagging, and remediation workflows.

• Support SOX, NERC CIP, and audit evidence requests by providing access reports, certification results, and governance documentation.

• Use Saviynt analytics, dashboards, and reporting capabilities to identify orphaned accounts, excessive entitlements, and access risks.

• Maintain operational documentation, procedures, runbooks, and support models for identity governance.

• Drive continuous improvement initiatives to reduce manual provisioning, improve access transparency, and eliminate excessive or standing access.

Required Qualifications

• 5–8 years of related cybersecurity or IT experience, with a focus on identity governance, access management, or identity lifecycle management.

• Strong hands-on knowledge of Saviynt IGA configuration and operations.

• Experience with IGA or IAM platforms, RBAC design, access modeling, access certifications, and audit support.

• Experience integrating identity governance solutions with enterprise applications and identity services.

• Understanding of identity lifecycle management, entitlement governance, and least-privilege access principles.

• Knowledge of segregation of duties and access risk management.

• Familiarity with IAM platforms such as Microsoft Entra ID.

• Understanding of regulatory requirements affecting identity governance.

• Strong communication, documentation, and collaboration skills.

• Ability to work effectively with technical teams, business stakeholders, application owners, compliance, risk, and audit teams.

• Strong attention to detail and commitment to continuous improvement.

• One or more relevant information security or identity certifications, or the ability to obtain a related certification through self-study within one year of the hire date. Relevant certification providers include ISC², ISACA, CompTIA, Microsoft, and Saviynt.

Preferred Qualifications

• Saviynt IGA certification.

• Microsoft Identity certifications.

• CISA, CISM, CISSP, or CRISC certification.

• ITIL v3 or ITIL v4 certification.

• Experience supporting enterprise identity governance programs subject to regulatory and audit requirements.

Key Technology Platforms

• Saviynt IGA

• Microsoft Entra ID

• CyberArk PAM

• ServiceNow

• SAP and other enterprise applications

Work Environment

The role operates in a standard office environment, with occasional after-hours support required during audits, access certification campaigns, and major enterprise initiatives.

Ideal Candidate

The ideal candidate is a hands-on Saviynt specialist who understands how to design and operate enterprise identity governance controls. They can develop RBAC models, configure access workflows, lead application integrations, manage certification campaigns, and provide the reporting and documentation needed to support security, risk, and compliance requirements.