Identity Governance Engineer

Hampton North; United States; Remote; USD 110,000 - 160,000; Full time

Job summary

Hampton North Identity Governance Lifecycle Specialist role designing, implementing, and operating IAM/IGA workflows for employees, contractors, third parties, and non-human identities. You will integrate sources, enable joiner/mover/leaver processes, and support application onboarding with audit-ready provisioning and evidence.

The ideal candidate has 4+ years in IAM/IGA, platform experience with Entra ID/SailPoint/Saviynt/Okta, and strong RBAC/SoD knowledge.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• 4+ years in IAM, IGA, cybersecurity, identity operations, or IT governance with hands-on lifecycle ownership.
• Platform experience with Microsoft Entra ID, SailPoint, Saviynt, or Okta.
• Experience with application connectors, APIs, directories, HR integrations, and service accounts.
• Knowledge of RBAC, SoD, data reconciliation, and audit evidence.
• Familiarity with NIST CSF, NIST SP 800-53, FFIEC-style access control.
• Certifications such as CISSP, CCSP, Security+, CIAM or SailPoint/Saviynt/Microsoft identity certs preferred.

Responsibilities

• Design, implement, and maintain identity lifecycle workflows for joiner, mover, leaver, leave of absence, contractor, and third-party identities.
• Integrate authoritative identity sources and define lifecycle states, attributes, correlation rules, ownership, and data quality controls.
• Administer access requests, approvals, provisioning, deprovisioning, birthright access, access certification, and revocation.
• Monitor provisioning failures, access request exceptions, certification issues, reconciliation results, and remediation.
• Develop and maintain SOPs, runbooks, workflows, control evidence, and audit-ready records.
• Partner with business and application owners to define roles, entitlements, ownership, and approval paths.
• Support RBAC design, access policy implementation, least privilege analysis, and SoD governance.
• Validate reviewers and documentation for risk-based access decisions.

Skills

IAM operations

Identity governance

Problem solving

Data analysis

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

Microsoft Entra ID

SailPoint

Saviynt

Okta

HR integrations

Job description

Identity Governance Lifecycle Specialist

This role designs, implements, and operates identity governance and administration processes for employees, contractors, third parties, and non-human identities. The specialist integrates authoritative sources, enables the joiner/mover/leaver lifecycle, builds access request and certification workflows, and supports application onboarding. Provisioning, deprovisioning, entitlements, separation of duties, evidence, and reporting all run repeatably and stay audit-ready.

Logistics:

Contract, remote in the northeast US, must be able to visit client site in CT 1-2 times per quarter

Here's what you'll be doing:

• Design, document, configure, and maintain joiner, mover, leaver, leave of absence, contractor, and third-party identity lifecycle workflows
• Integrate and reconcile authoritative identity sources and define lifecycle states, identity attributes, correlation rules, ownership, exception paths, and data quality controls
• Administer access requests, approvals, provisioning, deprovisioning, birthright access, access certification, and revocation
• Monitor provisioning failures, access request exceptions, certification issues, reconciliation results, orphaned accounts, stale access, and control breaches, and coordinate timely remediation
• Develop and maintain SOPs, runbooks, workflows, control evidence, and audit-ready records
• Partner with business and application owners to define roles, entitlements, ownership, approval paths, risk attributes, and role-to-entitlement mappings
• Support RBAC design, access policy implementation, least privilege analysis, separation of duties rules, access review campaigns, and exception governance
• Validate that the right reviewers assess the right access based on risk, with decisions, evidence, remediation, and completion documented
• Support governance for privileged access, service accounts, application identities, APIs, automation identities, and other non-human identities
• Maintain identity and entitlement catalogs, business-friendly access descriptions, application ownership records, and governance metadata
• Coordinate IGA onboarding with application owners and technical SMEs across enterprise and modernized platforms
• Gather and validate connector and API information, account schemas, entitlement data, test environments, service accounts, error handling, and deployment requirements
• Support connectors and workflow integrations, and validate account aggregation, provisioning, deprovisioning, reconciliation, logging, and failure handling
• Build and execute test scenarios for lifecycle events, access requests, user access certifications, roles, SoD policies, negative cases, rollback, and go-live readiness
• Produce application onboarding and configuration guides and support transition to operational teams
• Build dashboards and metrics for lifecycle timeliness, request turnaround, certification completion, access removals, exceptions, reconciliation, SoD violations, and application onboarding
• Support IAM audits, risk assessments, regulatory examinations, incident response, and evidence requests
• Work with the managed identity services provider to align SLAs, documentation, control performance, and escalation paths, and identify automation opportunities that reduce manual effort and access risk

And what you need to have:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (advanced degree or equivalent experience preferred)
• 4+ years in IAM, IGA, cybersecurity, identity operations, application security, or IT governance with hands-on ownership of identity lifecycle, access governance, provisioning, user access certifications, or application onboarding
• Platform experience with Microsoft Entra ID, SailPoint, Saviynt, Okta, or comparable
• Application connectors, APIs, directories, HR integrations, and service accounts
• RBAC, SoD, reconciliation, authoritative source integration, and audit evidence
• NIST CSF, NIST SP 800-53, and FFIEC aligned access control expectations
• Ability to analyze identity and entitlement data to find risk and control gaps, and to troubleshoot provisioning and reconciliation issues
• Managed service provider and regulated environment experience preferred
• Preferred certifications: CISSP, CCSP, Security+, SSCP, CIAM, Microsoft identity credentials, or an IGA platform certification for SailPoint, Saviynt, or Microsoft Entra ID Governance