Saviynt IAM Engineer

Company Federal Reserve Bank of Richmond When you join the Federal Reserve—the nation's central bank—you’ll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems. We invest in contemporary and emerging technology each year to support the Federal Reserve and our economy, and we’re building a dynamic and diverse team for our future. The Senior IGA Engineer is responsible for designing, developing, integrating, testing, deploying, and supporting enterprise Identity Governance & Administration capabilities, with primary emphasis on Saviynt EIC. The role requires strong hands-on development skills across identity lifecycle management, access requests, provisioning, certifications, role/access modeling, application onboarding, APIs, connectors, workflows, and production troubleshooting. The engineer will translate security and business requirements into scalable, supportable IGA solutions across SaaS, cloud, and enterprise applications.  Essential Responsibilities: Design, configure, develop, test, deploy, and maintain Saviynt EIC solutions supporting enterprise IGA use cases.  Build and enhance Joiner/Mover/Leaver (JML) lifecycle processes, birthright access, automated provisioning/deprovisioning, and termination controls.  Configure and develop access request workflows, approval chains, entitlement governance, access policies, roles, user manager structures, and delegated administration.  Develop and maintain access certification campaigns, reviewer logic, escalation paths, remediation workflows, and certification reporting.  Onboard SaaS, cloud, database, directory, and enterprise applications using Saviynt connectors and custom integration patterns.  Develop integrations using REST APIs, SCIM, JDBC/SQL, web services, file-based feeds, scripting, and other supported integration methods.  Create and troubleshoot Saviynt workflows, rules, analytics, jobs, tasks, connection configurations, imports, provisioning actions, and technical controls.  Implement and support RBAC, role engineering, entitlement structures, access policies, Segregation of Duties (SoD) controls, and least-privilege patterns.  Diagnose complex identity data, provisioning, reconciliation, connector, API, workflow, and performance issues across non-production and production environments.  Create reusable engineering patterns, technical documentation, configuration standards, runbooks, test evidence, and deployment procedures.  Partner with IAM architecture, cybersecurity, application owners, infrastructure, HR, audit, and engineering teams to deliver end-to-end identity solutions.  Participate in code/configuration reviews, release management, incident/problem management, root-cause analysis, and continuous platform improvement.  Mentor engineers and provide technical leadership on Saviynt implementation patterns, troubleshooting, and engineering quality.  Requirements Hands-on Saviynt EIC development and configuration experience delivering production IGA capabilities at enterprise scale.  Ability to independently develop, configure, test, troubleshoot, and support Saviynt—not solely gather requirements, administer campaigns, or provide program governance.  Demonstrated experience building Saviynt application integrations and resolving connector, API, data mapping, reconciliation, import, and provisioning issues.  Hands-on implementation of identity lifecycle automation, including JML events, account creation, access changes, deprovisioning, and termination processing.  Hands-on experience with access requests, approval workflows, certifications, entitlement governance, and provisioning workflows.  Strong REST API, JSON, SQL, and integration troubleshooting skills.  Production support experience, including incident diagnosis, log analysis, root-cause analysis, defect remediation, and controlled releases.  Strong understanding of IAM/IGA principles including least privilege, RBAC, SoD, access governance, authoritative sources, identity correlation, and lifecycle controls.  Qualifications  Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Engineering, or a closely related technical discipline or equivalent relevant experience 5+ years of professional experience in IAM, IGA, security engineering, application integration, or related identity engineering disciplines.  2+ years of recent, hands-on Saviynt engineering/development experience, preferably with Saviynt EIC.  Experience integrating heterogeneous applications, including SaaS applications, directories, databases, cloud platforms, and custom/internal systems.  Proficiency with RESTful APIs, JSON, SQL, data transformations, authentication methods, and API troubleshooting tools.  Experience with SCIM and common identity integration patterns; familiarity with LDAP/Active Directory concepts is expected.  Experience with source-of-truth / authoritative identity feeds such as HR systems and with identity correlation and data quality remediation.  Ability to analyze complex technical problems across identity data, IGA platform configuration, target applications, and downstream provisioning components.  Experience working through software/engineering lifecycle activities: requirements refinement, design, build, test, peer review, deployment, documentation, and production support.  Strong written and verbal communication skills with the ability to work effectively across security, engineering, application, audit, and business teams.  Preferred skills: Current Saviynt technical certification or formal Saviynt implementation training.  Experience with major cloud platforms such as AWS, Microsoft Azure, or Google Cloud and their identity/security integration patterns.  Experience integrating HR platforms such as Workday or other authoritative identity sources.  Experience with Privileged Access Management