IAM Solution Architect - Saviynt

iC Consult; Mumbai; On-site; INR 2,400,000 - 3,400,000; Full time

Job summary

iC Consult is seeking a seasoned IAM Technical Architect to own end-to-end Saviynt EIC platform solutions from Mumbai, leading a team of IAM Consultants. The candidate will architect enterprise-grade IGA designs, extend capabilities with Java-based connectors, and drive AI-enabled governance strategies across engagements.

You will mentor staff, define standards, and coordinate with security and compliance stakeholders to ensure delivery quality and regulatory alignment.

Qualifications

• 8-12 years IT experience with a strong IAM/IGA focus.
• 6+ years Saviynt experience on the EIC platform.
• Hands-on Java development and Saviynt SDK experience.
• Experience with Terraform and CI/CD tooling.
• Knowledge of SAML, OAuth/OIDC, RBAC/ABAC concepts.
• Demonstrated leadership and mentoring capabilities.
• Ability to design for security and compliance standards.

Responsibilities

• Lead and manage a team of IAM Consultants and Senior IAM Consultants across Saviynt engagements.
• Act as the primary technical escalation point and final design authority for Saviynt EIC solutions.
• Architect end-to-end IGA solutions on the Saviynt EIC platform.
• Produce architecture artifacts and define technical standards for the team.
• Lead onboarding of applications onto Saviynt including onboarding and certs.
• Design and configure JML lifecycles and automated provisioning rules.
• Implement ARS, Access Certification, SoD, and preventive controls.
• Design and govern RBAC models including role mining and entitlement management.
• Develop custom connectors and extensions in Java using Saviynt SDK.
• Build connectors to AD, Azure AD, Workday, SAP, ServiceNow and APIs.
• Define IaC strategy with Saviynt Terraform provider and CI/CD practices.
• Advise clients on AI Intelligence Suite adoption and integration.
• Lead performance tuning and remediation of the Saviynt platform.

Skills

IAM/IGA

Saviynt

Java development

Terraform

Leadership

AI in IAM

RBAC/ABAC

SAML/OIDC

Team mentoring

Tools

Saviynt EIC

Saviynt Terraform provider

Groovy

REST-Java connectors

Terraform

Job description

We are hiring a seasoned IAM Technical Architect to own the end-to-end technical solution on the Saviynt Enterprise Identity Cloud (EIC) platform and to lead a team of IAM Consultants and Senior IAM Consultants delivering Saviynt engagements out of India. Beyond deep, hands-on Saviynt platform mastery, this role requires strong Java engineering ability to extend the platform, hands-on command of the Saviynt Terraform provider to run identity configuration as code, and a working command of Saviynt's AI-powered Intelligence Suite so you can advise clients on where AI fits their IGA roadmap. You will be the final technical authority for your engagements and the primary technical mentor for your consulting team.

Role & Responsibilities:

• Lead and manage a team of IAM Consultants and Senior IAM Consultants across Saviynt engagements - assigning work, reviewing configurations and connector code, and owning the technical quality of the team's deliverables.
• Act as the primary technical escalation point and final design authority for Saviynt EIC solutions.
• Architect and design end-to-end IGA solutions on the Saviynt EIC platform, aligned to enterprise security standards and business requirements.
• Produce solution architecture artifacts - HLD, LLD, integration designs, data flow diagrams - and define technical standards, patterns, and best practices for the team.
• Lead application onboarding onto Saviynt, including provisioning/de-provisioning, access request, and certification setup for target systems.
• Design and configure Joiner - Mover - Leaver (JML) lifecycle workflows, birthright access, and automated provisioning rules.
• Implement Access Request System (ARS), Access Certification / Access Reviews, Segregation of Duties (SoD), and preventive/detective controls.
• Design and govern RBAC models, including role mining, role engineering, entitlement management, and role lifecycle.
• Architect and develop custom connectors and platform extensions in Java - using Saviynt's connector framework/SDK and REST-Java based connectors - and extend workflows/rules using Java, Groovy, and JavaScript where out-of-the-box capability falls short.
• Build and configure connectors to target systems (Active Directory, Azure AD / Entra ID, Workday, SAP, ServiceNow, databases, REST/SOAP APIs, SCIM, LDAP).
• Configure Saviynt workflows, rules engine, analytics, control center, request forms, SAV roles, and email templates.
• Define and own the organization's Infrastructure-as-Code strategy for Saviynt using the Saviynt Terraform provider - designing reusable Terraform modules for security systems, endpoints, connections, enterprise roles/entitlements, and job control resources, and establishing CI/CD, state management, and environment-promotion practices (dev/stage/prod).
• Evaluate and advise clients on adopting Saviynt's AI-powered Intelligence Suite - Access/Identity Intelligence recommendations, ISPM for human and non-human identities/AI agents, and the Integration & Onboarding Agent - aligning adoption with client risk and compliance goals.
• Lead performance tuning, troubleshooting, and remediation of the Saviynt platform and integrations.
• Provide technical leadership and mentoring to Consultants and Senior Consultants; review code and configuration for quality and security.
• Partner with security, compliance, audit, and business stakeholders to support regulatory requirements (SOX, GDPR, HIPAA, etc.) and audit evidence.
• Support upgrade, migration, and platform modernization initiatives, including migration from legacy IGA tools to Saviynt.
• Define and drive the IAM/IGA roadmap, contributing to Zero Trust and least-privilege strategies.

Skills:

• 8 - 12 years of overall IT experience with a strong focus on IAM/IGA, including proven experience leading and mentoring a team of consultants (2+ years in a technical lead/architect capacity).
• 6+ years of hands-on Saviynt experience, including architecture, design, and implementation on the EIC platform.
• Deep expertise across Saviynt modules: Access Request, Access Certification, SoD, Role Management, application onboarding, connectors, workflows, rules, and analytics.
• Strong hands-on Java development experience - core Java, Java-based custom connectors, Saviynt's connector SDK, and Groovy scripting - to build and extend Saviynt integrations beyond out-of-the-box capability.
• Proven hands-on experience with the Saviynt Terraform provider - designing and maintaining Terraform resources (security systems, endpoints, connections/connectors, enterprise roles, entitlements, job control, transport packages) to manage Saviynt configuration as code across environments; strong general Terraform/HCL and CI/CD (Git, Jenkins/GitHub Actions/Azure DevOps) skills.
• Solid working knowledge of Saviynt's AI-driven Intelligence Suite - Access/Identity Intelligence recommendations, ISPM for human and non-human/AI-agent identities, and the Integration & Onboarding Agent - with the ability to advise clients on adoption roadmaps.
• Strong understanding of core IAM/IGA concepts: identity lifecycle, provisioning/de-provisioning, RBAC/ABAC, entitlement management, access governance, and least-privilege.
• Experience integrating Saviynt with directory services and enterprise applications - AD, Azure AD/Entra ID, Workday, SAP, ServiceNow, and custom apps via APIs.
• Working knowledge of authentication and federation protocols: SAML, OAuth 2.0, OIDC, SCIM, LDAP, Kerberos.
• Familiarity with SSO, MFA, and PAM ecosystems, and how IGA integrates with them.
• Solid grasp of security frameworks and compliance (SOX, GDPR, HIPAA, ISO 27001, NIST).
• Proven experience leading solution design, documentation, and technical delivery in complex enterprise environments.