IGA/IAM Architect

Educology Solutions; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Educology Solutions seeks an experienced IGA/IAM Architect with Saviynt expertise to design, implement, and scale enterprise identity programs in the DC area.

You will lead architecture, strategy, and hands-on delivery of scalable identity governance across cloud and on-prem environments, emphasizing Zero Trust, automation, and regulatory compliance. You will mentor engineers and define governance standards while translating business needs into robust IAM architectures.

Qualifications

• 6+ years in IAM/IGA with at least 4+ years in an Architect role, designing enterprise-scale identity programs.
• 3–5+ years hands-on Saviynt experience, including modules like Access Request, Certifications, RBAC, SoD, Analytics.
• Strong expertise in IAM technologies (lifecycle management, SSO, PAM, directory services) and identity standards (SAML, OAuth, OIDC).
• Experience with cloud platforms (Azure/AWS) and on-prem integrations; DevSecOps CI/CD for IAM deployments.

Responsibilities

• Lead end-to-end architecture, design, and implementation of Saviynt-based IGA solutions.
• Architect core identity governance capabilities and RBAC/SoD across enterprise.
• Define and drive IGA roadmap in alignment with security, compliance, and digital transformation.
• Design integration patterns for cloud and on-prem apps using connectors, APIs, and custom integrations.
• Establish architecture standards, governance, and best practices for identity management.
• Collaborate with Security, Infra, Audit, and Compliance teams to ensure successful delivery.

Skills

IAM Architecture

Saviynt Expertise

Zero Trust

RBAC/SoD

SAML/OIDC

Tools

REST APIs

LDAP/AD

Azure AD

SCIM

Job description

We are seeking an experienced IGA/IAM Architect with deep expertise in Saviynt to design, implement, and scale enterprise identity governance solutions. The ideal candidate will bring a strong architectural mindset, hands-on technical leadership, and a proven ability to deliver secure, compliant, and business-aligned identity programs.

This role is responsible for leading the strategy, architecture, and implementation of identity governance capabilities across the enterprise, with a focus on scalability, automation, and Zero Trust principles.

DUTIES & RESPONSIBILITIES

• Lead the endtoend architecture, design, and implementation of Saviyntbased IGA solutions.
• Architect and implement core identity governance capabilities, including: o JML workflows
• Access Request & Provisioning oAccess Certifications / Reviews
• Role-Based Access Control (RBAC) & Role Engineering oSegregation of Duties (SoD)
• Identity Analytics and Reporting
• Define and drive the IGA roadmap and strategy, aligning with organizational security, compliance, and digital transformation initiatives.
• Evaluate existing IAM/IGA landscape and recommend modernization aligned with Zero Trust and identityfirst security models.
• Design integration patterns for onboarding enterprise applications (cloud and onprem) into Saviynt using connectors, APIs, and custom integrations.
• Establish and enforce architecture standards, design principles, and governance frameworks for identity management.
• Collaborate with crossfunctional teams (Security, Infrastructure, Application Owners, Audit, and Compliance) to ensure successful delivery and adoption.
• Provide technical leadership and mentorship to IGA engineers and guide implementation best practices.
• Support troubleshooting, performance tuning, and optimization of identity systems.
• Ensure solutions comply with regulatory and audit requirements (SOX, HIPAA, GDPR, etc.).

REQUIRED QUALIFICATIONS

• 6+ years of experience in IAM/IGA, with at least: o 4+ years in an Architect role, designing and implementing enterprisescale identity governance solutions.
• 3–5+ years of hands-on Saviynt experience, including:
• Implementation of Saviynt modules (Access Request, Certifications, RBAC, SoD, Analytics).
• Configuration of workflows, connectors (REST, JDBC, AD, Azure, etc.), and access policies.
• Experience with Saviynt EIC (Enterprise Identity Cloud) preferred.
• Strong expertise in IAM technologies, including: o Identity Lifecycle Management (Joiner/Mover/Leaver)
• Single Sign-On (SSO) & Federation oPrivileged Access Management (PAM)
• Directory Services
• Experience with DevSecOps practices, CI/CD pipelines for IAM deployments
• Experience with Microsoft identity technologies (Active Directory, Microsoft Entra ID).
• Understanding of identity standards and protocols (SAML, OAuth, OIDC, SCIM).
• Strong knowledge of cloud platforms (Azure/AWS) and SaaS application integrations.
• Proven ability to translate business requirements into scalable, secure IAM architectures.
• Experience with identity governance reporting, auditing, and compliance frameworks (SOX, HIPAA, GDPR, ISO 27001).

PREFERRED QUALIFICATIONS

• Saviynt certifications (e.g., Saviynt Certified Engineer/Architect)
• Knowledge of Zero Trust architecture frameworks
• Familiarity with scripting or development (Java, Python, SQL) for custom integrations
• Experience integrating with HR systems (e.g., Workday, SAP SuccessFactors)
• Experience integrating healthcare applications and platforms: o EHR systems such as Epic
• Clinical and operational systems requiring role-based and compliant access

KEY COMPETENCIES

• Strong architectural and problemsolving skills
• Excellent stakeholder communication and leadership abilities
• Ability to drive largescale identity transformations
• Deep understanding of security and risk management principles