Principal Engineer – Identity Governance & Administration (IGA)

NXP Semiconductors; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

NXP Semiconductors in India seeks a Principal Engineer to own Identity Governance & Administration, defining governance models and end-to-end architecture for humans, machines, and AI-driven identities. You will lead platform evaluation, integration engineering, and a long-term roadmap in a global context.

The role requires expert hands-on experience with SailPoint or Saviynt, deep IAM knowledge, and the ability to scale governance across thousands of applications while embedding Zero Trust

Qualifications

• 10+ years of experience in Identity & Access Management with deep specialization in IGA.
• Proven experience designing and operating enterprise-scale identity governance platforms.
• Expert-level hands-on experience with SailPoint (IdentityIQ / IdentityNow), Saviynt, or comparable IGA platforms.
• Strong understanding of: Identity lifecycle management, access governance, RBAC/ABAC, SoD, Zero Trust.

Responsibilities

• Act as the principal technical owner for Identity Governance & Administration platforms and capabilities.
• Design end-to-end IGA architecture including lifecycle management, access requests, role models, and certification workflows.
• Own the multi-year IGA roadmap aligned with Zero Trust strategy.
• Engineer robust integrations with Directories, IAM systems, and cloud platforms.

Skills

Identity Governance

IAM

IGA platforms

Zero Trust

Architecture

Tools

SailPoint

Saviynt

Job description

Role Overview

We are seeking a Principal Engineer – Identity Governance & Administration (IGA) to serve as the technical authority and owner for enterprise-wide identity governance capabilities. This role is responsible for defining and evolving the governance, lifecycle, and policy layer that protects company intellectual property, enforces least privilege, and enables Zero Trust at scale. This is a deeply technical, hands‑on principal role with end‑to‑end accountability—from IGA platform evaluation and selection to governance model design, integration engineering, and long‑term roadmap ownership. The ideal candidate brings expert‑level experience with SailPoint, Saviynt, or equivalent enterprise IGA platforms, combined with strong systems thinking and the ability to design durable governance solutions in complex, global environments. IGA is a Tier‑0 security capability. Weak governance leads directly to over‑privileged access, toxic combinations, audit failures, and elevated breach impact. This role ensures access is intentional, justified, reviewable, and continuously governed—across humans, machines, and AI‑driven identities.

Key Responsibilities

IG Architecture & Technical Ownership

• Act as the principal technical owner for Identity Governance & Administration platforms and capabilities
• Define, document, and evolve end‑to‑end IGA architecture, including: Identity lifecycle management Access request and approval workflows Role, entitlement, and policy models Certification and review frameworks
• Establish reference architectures, engineering standards, and design patterns for identity governance
• Own the multi‑year IGA roadmap aligned with enterprise security and Zero Trust strategy

Identity Lifecycle & Access Governance

• Design and implement scalable Joiner / Mover / Leaver (JML) workflows integrated with: HR systems Directories and IAM platforms Cloud platforms and applications
• Build and maintain RBAC, ABAC, and policy‑based access models that scale across thousands of applications
• Implement and optimize: Access request and approval flows Periodic access certifications and reviews Segregation of Duties (SoD) controls
• Ensure governance coverage across human, privileged, and non‑human identities

Governance for Non‑Human, AI & Machine Identities

• Define governance models for non‑human identities, including: AI agent identities Robotic Process Automation (RPA) identities Service accounts, application identities, and APIs
• Ensure machine and AI identities are: Properly onboarded, approved, and reviewed Least‑privileged and policy‑governed Auditable and lifecycle‑managed Prevent entitlement sprawl, orphaned access, and unmanaged machine identities
• Integrate non‑human identity governance into enterprise access reviews and compliance reporting

Zero Trust Enablement & Risk Reduction

• Embed least privilege, continuous governance, and defense‑in‑depth into all access models
• Partner with IAM, Security Architecture, and Cloud teams to ensure governance supports Zero Trust enforcement
• Proactively identify and remediate: Access sprawl Toxic combinations Orphaned and dormant entitlements Reduce blast radius by ensuring access is time‑bound, role‑aligned, and continuously reviewed

Platform Engineering, Integration & Automation

• Evaluate, select, and implement enterprise‑grade IGA platforms (SailPoint, Saviynt, or equivalent)
• Engineer robust integrations with: Directories and IAM systems Cloud platforms (AWS, Azure, GCP) Enterprise and SaaS applications
• Push beyond “tool configuration” to engineered governance solutions Increase automation to reduce manual effort, operational risk, and audit friction

Innovation, Continuity & Technical Leadership

• Continuously assess emerging IGA capabilities, identity standards, and automation opportunities
• Ensure knowledge continuity and eliminate dependency on individual resources
• Mentor senior engineers and elevate identity governance maturity across the organization
• Make high‑judgment tradeoffs between speed, risk, and long‑term maintainability

Required Qualifications

• Experience 10+ years of experience in Identity & Access Management with deep specialization in IGA
• Proven experience designing and operating enterprise‑scale identity governance platforms
• Expert‑level hands‑on experience with: SailPoint (IdentityIQ / IdentityNow), Saviynt, or comparable IGA platforms
• Strong understanding of: Identity lifecycle management (JML) Access governance and certification models RBAC, ABAC, and policy‑driven access control Segregation of Duties (SoD) design and enforcement Zero Trust and identity‑centric security architecture
• Experience integrating IGA platforms with: HR systems Directories and IAM platforms Cloud and SaaS applications
• Strong understanding of APIs, integrations, and distributed systems Architectural & Leadership Skills Ability to design governance solutions that scale across global enterprises Strong systems thinking and long‑term architectural judgment Proven ability to influence architecture and standards without formal authority Comfortable operating in ambiguous, high‑impact problem spaces

Preferred Qualifications

• Experience supporting global enterprises with complex identity ecosystems
• Strong cloud identity governance experience across AWS, Azure, and/or GCP Background in security architecture, platform engineering, or large‑scale SaaS systems Familiarity with privileged access governance and non‑human identity risk Experience partnering with GRC, Audit, and Compliance teams

Why This Role Is Critical

Identity governance determines who gets access, to what, and why. Without strong IGA, Zero Trust cannot scale, audits become fragile, and security incidents have outsized impact. This role directly protects the organization from: Over‑privileged access and toxic combinations Unmanaged AI, robotic, and service identities Audit failures and compliance exposure Excessive blast radius during security incidents This position is for an engineer who wants to define how identity governance works—not just operate tools—and who understands that governance is a core security control, not an afterthought.

More Information About NXP

More information about NXP in India... #LI-7013 NXP Semiconductors N.V. (NASDAQ: NXPI) enables a smarter, safer, and more sustainable world through innovation. As the world leader in secure connectivity solutions for embedded applications, NXP is pushing boundaries in the automotive, industrial & IoT, mobile, and communication infrastructure markets. For more information, visit www.nxp.com

Company Culture

Bright Minds. Bright Futures. We believe that a key component to growing our business is to develop our people. To enable you to grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills. Commitment At NXP. We recognize NXP is a powerful change agent as we continue to deliver innovative solutions that advance a more sustainable future. We remain steadfast in our commitment to sustainability and making measurable year‑on‑year progress. Also, we aim to create an inclusive work environment and we will not tolerate racism, discrimination or harassment of any kind. We have programs in place focused on diversity, inclusion and equality.