Lead Identity Governance & Administration (IGA) Engineer

Federal Reserve System; San Francisco (CA); On-site; CAD 227,000 - 363,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k) Matching

Pension

Paid Holidays

Backup Child Care

Job summary

The Federal Reserve Bank of San Francisco seeks a highly experienced Lead Identity Governance & Administration (IGA) Engineer to own and operate our Saviynt/MyAccess platform. You will lead technical design, mentor the team, support go-live readiness and drive long-term IGA strategy for scalable, secure enterprise operations.

Ideal candidates have extensive IAM, cybersecurity, data, and systems engineering backgrounds with hands-on Saviynt or comparable SaaS IGA.

Qualifications

• 7+ years IT experience with identity governance, IGA operations, and production platform support.
• Hands-on experience with SaaS IGA (Saviynt preferred) and integrations.
• Knowledge of HR source integrations and directory systems (AD/Entra ID) is required.

Responsibilities

• Lead architecture, design, configuration, and ownership for SaaS IGA platform.
• Implement security controls including CA policies and Zero Trust.
• Oversee identity lifecycle processes: Joiner–Mover–Leaver, access requests, provisioning, certifications.
• Maintain SaaS connectors, integrations, workflows, and provisioning logic.
• Partner with IAM, cybersecurity, HR, infrastructure, and applications teams.
• Drive root-cause analysis and post-go-live stabilization.
• Develop runbooks, technical docs, and operational materials.
• Mentor junior engineers and guide IAM and SaaS initiatives.
• Contribute to long-term IGA roadmap and platform scalability.
• Promote intelligent automation and orchestration to reduce manual work.

Skills

Identity Governance

IAM fundamentals

Mentoring engineers

Regulated environments

Automation awareness

Education

Bachelor’s degree in CS/IS/Cybersecurity

Tools

Saviynt

SaaS IGA

Active Directory

Entra ID / Azure AD

Job description

Company

Federal Reserve Bank of San Francisco

We are seeking a highly experienced Lead Identity Governance & Administration (IGA) Engineer to serve as the primary technical owner for our Saviynt/MyAccess platform. This role ensures the platform is stable, secure, scalable, and fully ready for enterprise production operations. You will lead technical design, oversee core IGA workflows, support go live readiness, and guide long term platform maturity.

This role will serve as the primary technical lead responsible for ensuring the platform is stable, secure, scalable, well documented, and ready for enterprise production operations.

The ideal candidate is a seasoned IAM, cybersecurity, data, and systems engineering professional with hands on experience in Saviynt or comparable SaaS IGA platforms. This person will lead technical design, train and mentor the internal team, support go-live readiness, and guide the long-term IGA strategy after implementation.

Key Responsibilities

• Lead technical architecture, design, configuration, and overall platform ownership for SaaS IGA.
• Design, implement, and enforce security controls including Conditional Access policies, Zero Trust principles, and regular access reviews
• Ensure stability and accuracy across identity lifecycle processes (Joiner–Mover–Leaver), access requests, provisioning, and certifications.
• Maintain and troubleshoot SaaS connectors, integrations, workflows, and provisioning logic.
• Partner with IAM, cybersecurity, HR, infrastructure, and application teams to support enterprise identity operations.
• Drive root‑cause analysis, issue resolution, and post‑go‑live stabilization.
• Develop technical documentation, runbooks, and operational support materials.
• Mentor junior engineers and provide technical leadership across IAM and SaaS initiatives
• Contribute to long‑term IGA roadmap, automation, and platform scalability.
• Drive adoption of intelligent automation and orchestration across identity and SaaS workflows to minimize manual intervention and improve operational efficiency

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or similar; or equivalent enterprise IAM/IGA experience.
• 7 or more years of IT experience with strong exposure to identity governance, IGA operations, and production platform support.
• Proven experience managing and integrating enterprise SaaS applications (e.g., Slack, Zoom, Salesforce, GitHub)
• Hands‑on experience with SaaS IGA (configuration, workflows, connectors, provisioning, access requests, certifications).
• Familiarity with applying AI/automation to operations, access reviews, or anomaly detection
• Strong background in Identity Governance & Administration (IGA) and IAM fundamentals.
• Practical knowledge of HR source integrations and directory systems (Active Directory, Microsoft Entra ID / Azure AD).
• Strong communication skills and experience mentoring engineers or guiding technical teams.
• Experience working in enterprise or regulated environments with compliance, audit, and access controls.
• Must be a US Citizen or Green Card holder with intent to become US Citizen.

Preferred Skills/Certifications

• Experience with other IAM/IGA tools (SailPoint, Okta, Ping, CyberArk).
• Saviynt certifications or willingness to obtain one.
• Cloud identity experience (Azure, AWS, GCP).
• Security certifications (CISSP, CISM, Security+).
• Background in role engineering, access modeling, or audit readiness.

#LI-Onsite

Base Salary Range: Min: $164,400Mid: $213,500 Max: $262,600 (Location: San Francisco)

Final salary and offer will be determined by the applicant’s background, experience, skills, internal equity, and alignment with market data.

We offer a wonderful benefits package including: Medical, Dental, Vision, Pre-tax Flexible Spending Account, Backup Child Care Program, Pre-Tax Day Care Flexible Spending Account, Paid Family Care Leave, Vacation Days, Sick Days, Paid Holidays, Pet Insurance, Matching 401(k), and Retirement/Pension.

The Bank is committed to providing reasonable accommodations to individuals with disabilities to participate in the job application or interview process, perform essential job functions and receive other benefits and privileges of employment. The SF Fed is an Equal Opportunity Employer. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].

Full Time / Part Time

Full time

Regular / Temporary

Regular

Job Exempt (Yes / No)

Yes

Job Category

Information Technology Family Group

Work Shift

First (United States of America)

The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.