Principal Engineer, Cybersecurity, IGA - Remote

Stryker; Kalamazoo (MI); On-site; USD 136,000 - 294,000; Full time

Benefits offered by this job

Health benefits

401(k)

Employee stock purchase plan

Wellbeing program

Job summary

Stryker is seeking an IGA Principal Engineer to design, build, and operate enterprise identity governance and access controls across the organization. You will work with senior stakeholders to translate requirements into scalable identity architectures and standards.

You will implement lifecycle workflows, SSO/MFA, and RBAC, while developing integrations and automation using PowerShell, Graph, REST, and SCIM to onboard applications and ensure SOX, HIPAA, ISO 27001, and NIST CSF compliance.

Qualifications

• Bachelor's degree or equivalent practical experience in IT/security.
• 8+ years IT/cybersecurity experience.
• 5+ years hands-on engineering/operation of IGA/IAM environments.
• Experience with SailPoint, Saviynt, or Microsoft Entra ID Governance, plus AD and Entra ID.
• Experience with identity lifecycle management, provisioning/deprovisioning, access certification, RBAC, and segregation-of-duties enforcement.
• Working knowledge of SAML, OAuth, OpenID Connect, and SCIM.
• Experience with PowerShell, Microsoft Graph, REST APIs.

Responsibilities

• Build, configure, and operate enterprise IGA platforms (SailPoint, Saviynt, EntraID Gov).
• Engineer identity lifecycle workflows for joiners/movers/leavers with automated provisioning.
• Implement and maintain access requests, approval workflows, RBAC, and attestation campaigns.
• Configure authoritative sources, identity reconciliation, and data quality remediation.
• Implement SSO, MFA, federation, and risk-based authentication (SAML, OAuth, OpenID).
• Develop automations via PowerShell, Graph, REST, and SCIM for onboarding apps.
• Produce identity reporting, governance artifacts, and audit evidence for controls.
• Troubleshoot IGA/IAM issues; document; support SOX/HIPAA/ISO/NIST compliance.

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience

Tools

SailPoint

Saviynt

Microsoft Entra ID Governance

Active Directory

Microsoft Entra ID

PowerShell

Microsoft Graph

REST API

SCIM

SAML

OAuth

OpenID Connect

Job description

Preference will be given to candidates residing in the Eastern or Central time zones.

As an IGA Principal Engineer, you will build and operate enterprise identity governance, authentication, and authorization services that protect access across the organization. You will partner with senior business, application, and infrastructure stakeholders to translate requirements into scalable identity architecture, standards, and controls.

What You Will Do

Technical Responsibilities

• Build, configure, and operate enterprise IGA platforms, including SailPoint, Saviynt, or Microsoft Entra ID Governance, with supporting directory and authentication services.
• Engineer identity lifecycle workflows for joiners, movers, and leavers, including automated provisioning and deprovisioning.
• Implement and maintain access requests, approval workflows, access certification and recertification campaigns, RBAC models, role mining, and segregation-of-duties rules.
• Configure authoritative sources, identity reconciliation, and identity data quality remediation.
• Implement SSO, MFA, federation, and risk-based authentication using SAML, OAuth, OpenID Connect, and SCIM.
• Develop PowerShell, Microsoft Graph, REST API, and SCIM automations and integrations to onboard applications to IGA services.
• Produce identity reporting, integration governance, and audit evidence for access-related controls.
• Troubleshoot IGA, provisioning, and directory issues; maintain documentation; and execute IAM controls supporting SOX, HIPAA, ISO 27001, and NIST CSF compliance.

Knowledge and Capabilities

• Gather requirements from senior business, application, and infrastructure stakeholders and provide scope and architecture consultation.
• Define, communicate, and embed enterprise identity governance standards, patterns, and controls with senior stakeholders.
• Analyze complex identity issues, communicate technical concepts clearly, and maintain precise configuration and governance practices.

What You Need

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline, or equivalent practical experience.
• Minimum 8 years of experience in IT or cybersecurity.
• Minimum 5 years of hands-on experience engineering and operating IGA or IAM environments.
• Experience with SailPoint, Saviynt, or Microsoft Entra ID Governance, plus Active Directory and Microsoft Entra ID.
• Experience with identity lifecycle management, provisioning and deprovisioning, access certification, RBAC, and segregation-of-duties enforcement.
• Working knowledge of SAML, OAuth, OpenID Connect, and SCIM.
• Experience with PowerShell, Microsoft Graph, or REST APIs.

Preferred Qualifications

• SailPoint IdentityIQ or IdentityNow Engineer, Saviynt, Microsoft Certified: Identity and Access Administrator Associate (SC-300), or CISSP certification.

United States of America Pay Ranges

• USN: $135,600 - $225,900 USD Annual
• US5: $142,400 - $237,200 USD Annual
• US10: $149,200 - $248,500 USD Annual
• US15: $155,900 - $259,800 USD Annual
• US20: $162,700 - $271,100 USD Annual
• US30: $176,300 - $293,700 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.

Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program. Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance. Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes. Alongside its customers around the world, Stryker impacts more than 150 million patients annually. Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.