Lead IAM Security Engineer- Saviynt IGA

STRATEGIC STAFFING SOLUTIONS HAS AN OPENING!

This is a Contract Opportunity with our company that MUST be worked on a W2 Only. No C2C eligibility for this position. Visa Sponsorship is Available! The details are below.

“Beware of scams. S3 never asks for money during its onboarding process.”

Job Title: Lead IAM Security Engineer- Saviynt IGA
On Site Work
Location: Lutz, FL 33549
Contract Length: 12+ Months

Job ref# 247302

We are seeking an experienced Lead IAM Security Engineer with deep expertise in Saviynt Identity Governance & Administration (IGA) to help mature and modernize a large enterprise IAM program.

This is an engineering-focused role designed for professionals who build, improve, and transform IAM capabilities—not individuals primarily performing day-to-day administration or ticket-based support. The ideal candidate will drive IAM strategy, automation, governance, and program maturity while partnering with internal stakeholders and third-party service providers.

Success in this role is measured by innovation, problem solving, process improvement, and the ability to deliver long-term IAM solutions that strengthen security, compliance, and operational efficiency.

What We're Looking For

We are interested in professionals who:

• Challenge the status quo and continuously seek improvements.
• Identify security gaps and opportunities for modernization.
• Drive IAM program maturity through engineering and automation.
• Develop strategic roadmaps and execution plans.
• Improve governance, compliance, and audit readiness.
• Build scalable IAM capabilities rather than perform routine operational tasks.
• Possess an engineering and solution-oriented mindset.

Candidates with fewer years of experience but demonstrated success implementing or transforming IAM programs may be considered over individuals with extensive administrative experience.

Primary Responsibilities

• Develop and execute the enterprise Identity & Access Management (IAM) roadmap aligned with business and security objectives.
• Design and implement Identity Governance & Administration (IGA) solutions using Saviynt.
• Design, implement, and maintain Role-Based Access Control (RBAC) models and least-privilege access strategies.
• Develop identity lifecycle workflows for user onboarding, transfers, and offboarding.
• Build and maintain certification campaigns, access reviews, compliance reporting, and governance processes.
• Design and enhance authentication, authorization, Single Sign-On (SSO), and access control solutions.
• Integrate enterprise applications, directories, and identity providers into the IAM platform.
• Develop custom workflows, scripts, connectors, and automation to improve IAM operations.
• Monitor and respond to IAM-related security incidents and unauthorized access events.
• Serve as a subject matter expert during audits and regulatory assessments involving IAM, SOX, PII, and related compliance requirements.
• Partner closely with Cyber Security, Human Resources, business units, and technology teams to deliver secure and scalable IAM solutions.
• Identify opportunities to improve automation, governance, and operational efficiency across the IAM environment.

Required Qualifications

• Approximately 5+ years of Identity & Access Management experience (strong candidates with exceptional accomplishments may also be considered).
• Hands-on experience with Saviynt Identity Governance & Administration (IGA).
• Strong understanding of:
• Identity lifecycle management
• Role-Based Access Control (RBAC)
• Least privilege principles
• Access certifications
• Identity governance
• Workflow development
• Experience designing and implementing IAM workflows for onboarding, offboarding, and user lifecycle management.
• Experience developing custom scripts, connectors, or integrations for IAM platforms.
• Strong understanding of enterprise authorization models and organizational security structures.
• Experience integrating IAM solutions with enterprise applications, directories, and business systems.
• Experience securing enterprise reporting platforms and user privileges.
• Knowledge of SAP security concepts, including:
• SAP authorization concepts
• Portal security
• Single Sign-On
• Directory Services
• Internet Transaction Server (ITS)
• Web services security
• Experience with Governance, Risk & Compliance (GRC), Segregation of Duties (SoD), and access controls.
• Experience supporting compliance initiatives including:
• SOX
• NERC CIP
• NIST
• PCI
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication skills with both technical and business stakeholders.

Preferred Qualifications

• Experience with Active Directory (AD) or LDAP directory services.
• Experience with Azure Active Directory / Microsoft Entra ID.
• Experience deploying and supporting Multi-Factor Authentication (MFA).
• Experience implementing and supporting Single Sign-On (SSO).
• Experience with SAML and OpenID Connect (OIDC).
• Experience with privileged access management technologies.
• Knowledge of Azure AD group administration.
• Experience supporting hybrid enterprise identity environments.