Lead Security Engineer

Genworth Financial, Inc.; Lynchburg (VA); Hybrid; USD 121,000 - 187,000; Full time

Benefits offered by this job

Healthcare Coverage

401(k) Plan

Paid Time Off

Tuition Reimbursement

Student Loan Repayment

Wellness programs

Job summary

Genworth Financial, Inc. is seeking a Lead Security Engineer specializing in Identity and Access Management. The role supports SailPoint IdentityIQ and Identity Security Cloud in Lynchburg/Richmond hybrid or remote within EST time zones.

You will design and deploy enterprise IAM solutions, manage identity lifecycle, and collaborate with stakeholders to strengthen access governance and compliance. A strong background in SailPoint and security engineering is required.

Qualifications

• 5-7 years of IAM, information security, or security engineering experience.
• Hands-on with SailPoint IdentityIQ and Identity Security Cloud.
• Experience with SailPoint workflows, provisioning, certifications, and access controls.
• Knowledge of Java, XML, JSON, REST APIs, and integration patterns.

Responsibilities

• Design, implement, and support IAM solutions with SailPoint IdentityIQ and Identity Security Cloud.
• Engineer identity lifecycle processes and governance controls.
• Configure workflows, connectors, and integrations with enterprise systems.
• Collaborate with stakeholders across IT, compliance, and business units.

Skills

SailPoint IdentityIQ

Identity Security Cloud

IAM

Java

Azure AD

Active Directory

SAML/OAuth/OpenID

DevOps

Education

Bachelor's degree in Cyber Security

Tools

SailPoint IdentityIQ

SailPoint Identity Security Cloud

Active Directory

Azure AD

Job description

At Genworth, we empower families to navigate the aging journey with confidence. We are compassionate, experienced allies for those navigating care with guidance, products, and services that meet families where they are. Further, we are the spouses, children, siblings, friends, and neighbors of those that need care-and we bring those experiences with us to work in serving our millions of policyholders each day. We apply that same compassion and empathy as we work with each other and our local communities. Genworth values all perspectives, characteristics, and experiences so that employees can bring their full, authentic selves to work to help each other and our company succeed. We celebrate our diversity and understand that being intentional about inclusion is the only way to create a sense of belonging for all associates. We also invest in the vitality of our local communities through grants from the Genworth Foundation, event sponsorships, and employee volunteerism.

Our four values guide our strategy, our decisions, and our interactions: Make it human. We care about the people that make up our customers, colleagues, and communities. Make it about others. We do what's best for our customers and collaborate to drive progress. Make it happen. We work with intention toward a common purpose and forge ways forward together. Make it better. We create fulfilling purpose-driven careers by learning from the world and each other.

POSITION TITLE

Lead Security Engineer - Identity and Access Management This role is not eligible for employment visa sponsorship.

POSITION LOCATION

Lynchburg, VA, Richmond, VA, Remote This position is available to Virginia residents as Richmond or Lynchburg, VA hybrid in-office applicants or remote applicants residing in states/locations under Eastern or Central Standard Time: Alabama, Arkansas, Connecticut, Delaware, Florida, Georgia, Illinois, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Minnesota, Mississippi, Missouri, Nebraska, New Hampshire, New Jersey, New York, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Vermont, Virginia, Washington DC, West Virginia or Wisconsin. *Hybrid in-office would be required if you reside within 50 miles of our Richmond or Lynchburg, VA office. Required in-office days are Tuesdays, Wednesdays and Thursdays, with working hours targeting our core business hours of 9am-5pm EST.

YOUR ROLE

As an IT Security team member, you’ll play a crucial role in providing hands-on design, best practice implementation, configuration, integration, and deployment of Identity and Access Management products (SailPoint IIQ & other homegrown applications). You will be responsible for adhering to standards and policies for secure implementations, overseeing compliance, and supporting key IT and business stakeholders. As an ideal candidate, you will rely on extensive experience with Identity and Access Management, secure development practices and maintaining and maturing IAM Program.

What you will be doing

Design, implementation, and ongoing support of enterprise Identity and Access Management solutions with a primary focus on SailPoint IdentityIQ and SailPoint Identity Security Cloud. Engineer and enhance identity lifecycle processes, including joiner, mover, leaver, provisioning, deprovisioning, access requests, certifications, role management, and policy enforcement. Design, configure, and troubleshoot SailPoint workflows, rules, connectors, access profiles, roles, identity profiles, transforms, and integrations with enterprise systems. Support migration, modernization, or coexistence efforts between SailPoint IdentityIQ and Identity Security Cloud, ensuring secure, scalable, and maintainable solutions. Partner with application owners, infrastructure teams, HR, compliance, audit, and business stakeholders to onboard applications and improve identity governance controls.

Deliverables / Results

Reliable, well-documented IAM solutions that support secure access, operational efficiency, and compliance requirements. Successful onboarding of applications, data sources, and access models into SailPoint platforms. Improved automation for identity lifecycle management, access fulfillment, certification campaigns, and policy controls. Technical documentation, runbooks, test evidence, and implementation notes that support audit readiness and long-term operational support.

Impact / Value Add

Strengthen the organization’s security posture by ensuring the right people have the right access at the right time. Reduce access risk through improved governance, automated controls, timely deprovisioning, and clear certification processes. Enable business agility by simplifying access requests, approval, and fulfillment processes while maintaining strong security and compliance standards. Contribute to the maturity of the IAM program by identifying opportunities to streamline legacy processes and improve platform reliability.

Ownership

Own complex IAM engineering work from requirements and design through build, testing, implementation, and production support. Take accountability for technical quality, secure configuration, documentation, change readiness, and operational handoff. Proactively identify risks, dependencies, defects, and blockers, and communicate status clearly to leadership and stakeholders.

Collaboration

Work closely with security architecture, IAM operations, application teams, infrastructure, cloud, HR, legal, compliance, audit, and business partners. Translate business and compliance requirements into practical IAM designs and implementation plans. Provide technical guidance, mentoring, and knowledge sharing to engineers, administrators, and support teams.

What you bring

Perspective A security-first mindset with practical experience balancing risk reduction, user experience, operational needs, and regulatory expectations. A strong understanding of identity governance, access management, least privilege, segregation of duties, access certification, and audit readiness. A continuous improvement mindset focused on simplification, automation, reliability, and measurable IAM program maturity.

Qualities

Strong problem-solving, analytical, and troubleshooting skills with the ability to resolve complex identity, access, data, and integration issues. Clear written and verbal communication skills, including the ability to explain technical IAM concepts to non-technical stakeholders. Demonstrated ownership, collaboration, attention to detail, and ability to lead work across multiple teams and priorities.

Education

Bachelor’s degree in Cyber Security, Information Security, Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience. Relevant SailPoint certifications, cloud security certifications, or IAM/security certifications are preferred.

Skills

5-7 years of professional experience in Identity and Access Management, information security, or security engineering. Hands-on experience with SailPoint IdentityIQ and SailPoint Identity Security Cloud, including configuration, administration, development, and support. Experience with SailPoint workflows, rules, connectors, provisioning, certifications, access requests, roles, policies, identity profiles, access profiles, transforms, and source integrations. Knowledge of Java, BeanShell, JavaScript, XML, JSON, REST APIs, SCIM, JDBC, web services, and related integration patterns. Experience integrating IAM platforms with Active Directory, Entra ID / Azure AD, LDAP, HR systems, SaaS applications, databases, and enterprise applications. Understanding of SAML, OAuth, OpenID Connect, MFA, SSO, privileged access concepts, Zero Trust principles, and cloud identity patterns. Familiarity with SDLC, Agile delivery, change management, DevOps practices, Git, CI/CD pipelines, testing, and production support processes.

Competencies

Technical leadership and solution design Identity governance and administration expertise Secure engineering and compliance-oriented delivery Cross-functional collaboration and stakeholder management Root-cause analysis and production issue resolution Documentation, audit readiness, and operational excellence Experience 5-7 years of IAM, hands on SailPoint IdentityIQ and Identity Security Cloud Experience supporting regulated environments, audit requests, SOX controls, access reviews, and compliance reporting preferred. Experience leading technical workstreams, mentoring engineers, and delivering IAM capabilities in complex enterprise environments.

ADDITIONAL INFORMATION

National Range: $120,900 - $187,000 Disclaimer: This role is aligned to a national market-based pay range. Actual compensation will vary based on geographic location, experience, skills, and other job-related factors. In addition to base salary, this role is eligible to participate in a bonus incentive plan. Incentive compensation is based on individual and company performance and is not guaranteed.

Employee Benefits & Well-Being

Genworth employees make a difference in people’s lives every day. We’re committed to making a difference in our employees’ lives. Competitive Compensation & Total Rewards Incentives Comprehensive Healthcare Coverage Multiple 401(k) Savings Plan Options Auto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!) Generous Paid Time Off - Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave Disability, Life, and Long Term Care Insurance Tuition Reimbursement, Student Loan Repayment and Training & Certification Support Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management) Caregiver and Mental Health Support Services

Genworth Financial, Inc (“Genworth”) (NYSE: GNW) is a Fortune 1000 company focused on empowering families to navigate the aging journey with confidence, now and in the future. Headquartered in Richmond, Virginia, Genworth and its CareScout businesses provide guidance, products, and services that help people understand their caregiving options and fund their long-term care needs. Genworth is also the parent company and majority-owner of publicly traded Enact Holdings, Inc. (Nasdaq: ACT), a leading U.S. mortgage insurance provider.

Genworth Mexico Genworth US We know we can’t deliver on our mission unless we deliver for our employees. That’s why we’re committed to creating a work environment that fosters inclusion, excellence, improvement and connection. We know each employee contributes in their own unique way and we’re dedicated to supporting every one of them to help them reach their full potential. We are proud to be an equal opportunity employer and all hiring decisions are based on merit, qualifications, and business need. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.