Sr. Security Engineer

We are seeking a highly skilled Senior Security Engineer with 5+ years of hands-on experience in Identity and Access Management (IAM) to design, build, and optimize our enterprise identity infrastructure. In this role, you will lead the implementation and daily administration of key IAM, IGA, and continuous authorization frameworks using Okta, Saviynt, and SGNL. The ideal candidate thrives in a technical, execution-heavy environment, bridges traditional IAM with modern Zero Trust / Continuous Adaptive Trust models, and brings deep technical proficiency in automation, API integrations, and access governance.

Responsibilities

Architect, deploy, and maintain robust enterprise identity solutions across Okta (Workforce Identity Cloud), Saviynt (IGA), and SGNL (CA / Dynamic Access); Configure and optimize Saviynt for access requests, dynamic role-based access control (RBAC/ABAC), access certification campaigns, and automated provisioning/deprovisioning workflows; Manage and secure Okta configurations, including SAML 2.0, OIDC, adaptive MFA policies, passwordless authentication, and Directory Integrations (Active Directory/LDAP/HRIS); Operationalize SGNL to enforce Zero Trust access, Just-In-Time (JIT) access, and continuous, event-driven authorization policies across enterprise applications and services; Develop custom connectors, workflows, and automated pipeline scripts (Python, PowerShell, REST APIs) to integrate target applications into Saviynt and Okta; Collaborate with SOC and Incident Response teams to investigate identity-related threats, privileged access abuses, and anomalous login behavior; Partner with Security Compliance to enforce least-privilege principles, generate audit-ready reporting, and remediate identity risk findings

Requirements

5+ years of direct, hands-on experience in information security with a primary focus on Identity and Access Management (IAM); Deep technical expertise in Okta, including Lifecycle Management (LCM), Universal Directory, Workflows, Adaptive MFA, and SSO integrations; Proven hands-on administration of Saviynt Enterprise IGA, including analytics, connector deployment, lifecycle workflows, and access request configuration; Experience with modern continuous authorization architectures, specifically hands-on exposure to SGNL or similar fine-grained, policy-based access control platforms (CA/ABAC/ReBAC); Strong understanding of core identity standards and protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, and LDAP; Proficient in scripting and automation using Python, PowerShell, or Bash, alongside strong REST API integration capabilities; Solid grasp of Zero Trust Security frameworks and Least Privilege Access models

Nice to have

Experience with Privileged Access Management (PAM) integrations (e.g., CyberArk, BeyondTrust); Relevant industry certifications such as Okta Certified Professional/Administrator/Consultant, Saviynt Certified Professional, CISSP, or CISM; Background in cloud identity security (AWS IAM, Azure AD / Microsoft Entra ID, GCP IAM)