IGA Principal Engineer — Identity Governance & Access

PowerToFly; Kalamazoo (MI); Remote; USD 136,000 - 294,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Employee Stock Purchase Plan (ESPP)

Job summary

Stryker seeks an IGA Principal Engineer to build and operate enterprise identity governance services protecting access across the organization. You will partner with senior stakeholders to translate requirements into scalable identity architecture and controls.

You will implement SSO, MFA, RBAC, and lifecycle automation, while maintaining governance and compliance artifacts across SOX, HIPAA, and ISO 27001 frameworks.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or related discipline, or equivalent practical experience.
• Minimum 8 years of experience in IT or cybersecurity.
• Minimum 5 years of hands-on experience engineering and operating IGA or IAM environments.
• Experience with SailPoint, Saviynt, or Microsoft Entra ID Governance, plus Active Directory and Microsoft Entra ID.
• Experience with identity lifecycle management, provisioning and deprovisioning, access certification, RBAC, and segregation-of-duties enforcement.
• Working knowledge of SAML, OAuth, OpenID Connect, and SCIM.
• Experience with PowerShell, Microsoft Graph, or REST APIs.

Responsibilities

• Build, configure, and operate enterprise IGA platforms, including SailPoint, Saviynt, or Microsoft Entra ID Governance, with supporting directory and authentication services.
• Engineer identity lifecycle workflows for joiners, movers, and leavers, including automated provisioning and deprovisioning.
• Implement and maintain access requests, approval workflows, access certification and recertification campaigns, RBAC models, role mining, and segregation-of-duties rules.
• Configure authoritative sources, identity reconciliation, and identity data quality remediation.
• Implement SSO, MFA, federation, and risk-based authentication using SAML, OAuth, OpenID Connect, and SCIM.
• Develop PowerShell, Microsoft Graph, REST API, and SCIM automations and integrations to onboard applications to IGA services.
• Produce identity reporting, integration governance, and audit evidence for access-related controls.
• Troubleshoot IGA, provisioning, and directory issues; maintain documentation; and execute IAM controls supporting SOX, HIPAA, ISO 27001, and NIST CSF compliance.

Job description

Stryker seeks an IGA Principal Engineer to build and operate enterprise identity governance services protecting access across the organization. You will partner with senior stakeholders to translate requirements into scalable identity architecture and controls.

You will implement SSO, MFA, RBAC, and lifecycle automation, while maintaining governance and compliance artifacts across SOX, HIPAA, and ISO 27001 frameworks.