IAM Architect – Identity Governance / Saviynt / Cloud

Pitsolutions; Indiana; On-site; USD 140,000 - 190,000; Full time

Job summary

Pitsolutions is seeking an IAM Architect to lead the design, automation, and delivery of enterprise Identity Governance capabilities, focusing on scalable, secure lifecycle management and DevOps-driven IAM engineering.

The role requires strong hands-on experience with Saviynt or other IGA platforms, plus expertise in Active Directory/Entra ID, automation scripting, and data analytics to support compliance and reporting requirements.

Qualifications

• 10+ years of IT experience with IAM focus.
• 8+ years of IAM in enterprise environments.
• Hands-on design and automation of Joiner, Leaver, Movers (JML).
• Leadership of DevOps teams within IGA projects.

Responsibilities

• Lead identity governance engineering initiatives across JML processes.
• Own product strategy and roadmap for the Identity Governance platform.
• Design scalable IAM architectures aligned to security and compliance frameworks.
• Drive agile delivery and backlog prioritisation across IAM squads.
• Collaborate with HR, ITSM, integration teams, and security stakeholders.
• Own audit reporting and compliance controls (SOX, regulatory).
• Implement automation using scripting and Infrastructure-as-Code.
• Oversee incident, problem, and operational support management.
• Develop and mentor engineering teams for knowledge sharing.

Skills

DevOps leadership

JML automation

IAM architecture

Automation scripting

Stakeholder collaboration

Data analytics

Tools

Saviynt

SailPoint

Okta

Entra ID

Active Directory

Job description

IAM Architect – Identity Governance / Saviynt / Cloud

We are seeking an IAM Architect (Identity Governance – L3) to lead the design, automation, and operational delivery of enterprise-scale identity governance capabilities. This role focuses on engineering secure, scalable, and compliant identity lifecycle management solutions while leading a DevOps-driven IAM engineering team.

Role Overview

• Lead identity governance engineering and automation initiatives across JML processes.
• Develop and own product strategy and roadmap for the Identity Governance platform.
• Design and implement scalable IAM architectures aligned to security and compliance frameworks.
• Drive agile delivery and backlog prioritisation across IAM engineering squads.
• Collaborate with HR, ITSM, integration teams, and security stakeholders.
• Own audit reporting and compliance controls (SOX, regulatory frameworks).
• Implement automation using scripting and Infrastructure-as-Code principles.
• Oversee incident, problem, and operational support management.
• Develop and mentor engineering teams ensuring knowledge sharing and capability uplift.

Experience Requirement (Mandatory)

• Total Experience: 10–14 years.
• Minimum 8+ years of relevant experience operating within Identity and Access Management (IAM).
• Proven hands‑on experience designing and automating Joiner, Mover, Leaver (JML) processes at enterprise scale.
• Strong experience leading DevOps engineering teams within IGA environments.
• Hands‑on experience with Saviynt (preferred) or other leading IGA platforms (SailPoint, Okta, ForgeRock).
• Experience working with Microsoft Active Directory and Entra ID in hybrid environments.

Technical Skills

• Saviynt (preferred) or SailPoint / Okta / ForgeRock IGA platforms.
• Microsoft Active Directory and Entra ID.
• IAM lifecycle management (JML) including non-human identities.
• Basic scripting or programming for automation (Python, PowerShell).
• Integration of IAM systems with enterprise applications and platforms.
• SQL / Python / Excel / PowerBI for identity data analytics.
• Knowledge of IAM frameworks, authentication protocols, and security controls.
• Understanding of disaster recovery and business continuity for IAM environments.

Certifications (Preferred)

• Certified Identity and Access Manager (CIAM).
• Certified Identity Management Professional (CIMP).
• CISSP or CISM.
• Cloud certifications (Azure / AWS).

Not Suitable For

• Operations-only IAM administrators without architecture experience.
• Business analysts without hands‑on IGA platform experience.
• Profiles without enterprise-scale JML automation experience.
• Candidates without DevOps or automation exposure.

Equal Opportunity Statement

• We value diversity and inclusion. As an equal opportunity employer, we welcome applicants from all backgrounds and walks of life.

Security & Confidentiality Statement

• This role may involve access to sensitive business information. The selected candidate is expected to follow internal information security policies and maintain strict confidentiality when handling proprietary or confidential data.