Lead Identity Governance & Administration (IGA) Engineer

Federal Reserve Bank of San Francisco; Cleveland (OH); On-site; USD 164,000 - 263,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Pre-tax Flexible Spending Account

Backup Child Care Program

Pre-Tax Day Care Flexible Spending

Paid Family Care Leave

Vacation Days

Sick Days

Paid Holidays

Pet Insurance

Matching 401(k)

Retirement/Pension

Job summary

Federal Reserve Bank of San Francisco seeks a Lead Identity Governance & Administration Engineer to be the primary technical owner for our Saviynt/MyAccess platform, ensuring stability, security, and enterprise readiness. You will lead design, oversee IGA workflows, support go-live readiness, and shape long-term platform maturity.

The ideal candidate has hands-on IAM experience, mentors teams, and drives automation with a focus on Zero Trust and access reviews within a regulated environment.

Qualifications

• Bachelor's degree or equivalent enterprise IAM/IGA experience.
• 7+ years IT experience with identity governance, IGA operations, and production platform support.
• Experience integrating enterprise SaaS apps (Slack, Zoom, Salesforce, GitHub).
• Hands-on with SaaS IGA: configuration, workflows, connectors, provisioning, access reviews.
• HR source integrations and directory systems knowledge (AD, Entra ID/Azure AD).
• Experience mentoring engineers and guiding technical teams.

Responsibilities

• Lead technical architecture and platform ownership for SaaS IGA.
• Design and enforce security controls including CA policies and Zero Trust.
• Ensure identity lifecycle processes are accurate and well-governed.
• Maintain SaaS connectors, integrations, workflows, and provisioning logic.
• Mentor junior engineers and guide long-term IGA roadmap.

Skills

IGA fundamentals

Mentoring engineers

SaaS integration

Cross-functional collaboration

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

Saviynt

MyAccess

Azure AD

Active Directory

Job description

Federal Reserve Bank of San Francisco We are seeking a highly experienced Lead Identity Governance & Administration (IGA) Engineer to serve as the primary technical owner for our Saviynt/MyAccess platform. This role ensures the platform is stable, secure, scalable, and fully ready for enterprise production operations. You will lead technical design, oversee core IGA workflows, support go live readiness, and guide long term platform maturity.

This role will serve as the primary technical lead responsible for ensuring the platform is stable, secure, scalable, well documented, and ready for enterprise production operations.

The ideal candidate is a seasoned IAM, cybersecurity, data, and systems engineering professional with hands on experience in Saviynt or comparable SaaS IGA platforms. This person will lead technical design, train and mentor the internal team, support go-live readiness, and guide the long-term IGA strategy after implementation.

Key Responsibilities:

• Lead technical architecture, design, configuration, and overall platform ownership for SaaS IGA.
• Design, implement, and enforce security controls including Conditional Access policies, Zero Trust principles, and regular access reviews
• Ensure stability and accuracy across identity lifecycle processes (Joiner-Mover-Leaver), access requests, provisioning, and certifications.
• Maintain and troubleshoot SaaS connectors, integrations, workflows, and provisioning logic.
• Partner with IAM, cybersecurity, HR, infrastructure, and application teams to support enterprise identity operations.
• Drive rootcause analysis, issue resolution, and postgolive stabilization.
• Develop technical documentation, runbooks, and operational support materials.
• Mentor junior engineers and provide technical leadership across IAM and SaaS initiatives
• Contribute to longterm IGA roadmap, automation, and platform scalability.
• Drive adoption of intelligent automation and orchestration across identity and SaaS workflows to minimize manual intervention and improve operational efficiency

Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or similar; or equivalent enterprise IAM/IGA experience.
• 7 or more years of IT experience with strong exposure to identity governance, IGA operations, and production platform support.
• Proven experience managing and integrating enterprise SaaS applications (e.g., Slack, Zoom, Salesforce, GitHub)
• Hands-on experience with SaaS IGA (configuration, workflows, connectors, provisioning, access requests, certifications).
• Familiarity with applying AI/automation to operations, access reviews, or anomaly detection
• Strong background in Identity Governance & Administration (IGA) and IAM fundamentals.
• Practical knowledge of HR source integrations and directory systems (Active Directory, Microsoft Entra ID / Azure AD).
• Strong communication skills and experience mentoring engineers or guiding technical teams.
• Experience working in enterprise or regulated environments with compliance, audit, and access controls.
• Must be a US Citizen or Green Card holder with intent to become US Citizen.

Preferred Skills/Certifications:

• Experience with other IAM/IGA tools (SailPoint, Okta, Ping, CyberArk).
• Saviynt certifications or willingness to obtain one.
• Cloud identity experience (Azure, AWS, GCP).
• Security certifications (CISSP, CISM, Security+).
• Background in role engineering, access modeling, or audit readiness.

#LI-Onsite

Base Salary Range: Min: $164,400 Mid: $213,500 Max: $262,600 (Location: San Francisco)

Final salary and offer will be determined by the applicant's background, experience, skills, internal equity, and alignment with market data.

We offer a wonderful benefits package including: Medical, Dental, Vision, Pre-tax Flexible Spending Account, Backup Child Care Program, Pre-Tax Day Care Flexible Spending Account, Paid Family Care Leave, Vacation Days, Sick Days, Paid Holidays, Pet Insurance, Matching 401(k), and Retirement/Pension.

The Bank is committed to providing reasonable accommodations to individuals with disabilities to participate in the job application or interview process, perform essential job functions and receive other benefits and privileges of employment. The SF Fed is an Equal Opportunity Employer. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].

Full time, Regular, Yes, Information Technology Family Group, First (United States of America).

The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.