Principal Engineer, Cybersecurity, IGA

This is a fully remote position, open to applicants in Michigan.

📋 Description

• Develop, configure, and manage enterprise IGA platforms such as SailPoint, Saviynt, or Microsoft Entra ID Governance, along with supporting directory and authentication services.

• Design identity lifecycle workflows for new hires, role changes, and departures, including automated provisioning and deprovisioning processes.

• Establish and sustain access requests, approval workflows, access certification, and recertification initiatives, as well as RBAC models, role mining, and segregation-of-duties regulations.

• Configure authoritative data sources, manage identity reconciliation, and address identity data quality issues.

• Implement SSO, MFA, federation, and risk-based authentication utilizing SAML, OAuth, OpenID Connect, and SCIM protocols.

• Create automations and integrations using PowerShell, Microsoft Graph, REST API, and SCIM to onboard applications to IGA services.

• Generate identity reports, governance integrations, and audit evidence for access-related compliance controls.

• Resolve IGA, provisioning, and directory-related issues; maintain thorough documentation; and implement IAM controls to support SOX, HIPAA, ISO 27001, and NIST CSF compliance.

• Collect requirements from senior business, application, and infrastructure stakeholders while providing architectural consultation and scope definition.

• Define, communicate, and incorporate enterprise identity governance standards, practices, and controls with senior stakeholders.

• Evaluate complex identity challenges, articulate technical concepts clearly, and uphold accurate configuration and governance methodologies.

⛳️ Requirements

• A Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent practical experience.

• At least 8 years of experience in IT or cybersecurity.

• Minimum of 5 years of practical experience in engineering and managing IGA or IAM environments.

• Familiarity with SailPoint, Saviynt, or Microsoft Entra ID Governance, as well as Active Directory and Microsoft Entra ID.

• Proficient in identity lifecycle management, provisioning and deprovisioning, access certification, RBAC, and enforcement of segregation-of-duties.

• Knowledge of SAML, OAuth, OpenID Connect, and SCIM.

• Experience with PowerShell, Microsoft Graph, or REST APIs.

• Preferred qualifications: SailPoint IdentityIQ or IdentityNow Engineer, Saviynt, Microsoft Certified: Identity and Access Administrator Associate (SC-300), or CISSP certification.

🏝️ Benefits

• Flexibility to work remotely.

• No travel required (Travel Percentage: None).