Saviynt IGA Engineer: Enterprise IAM Specialist

Federal Reserve Bank of Boston

Boston (MA)

On-site

USD 120,000 - 192,000

Full time

14 days+

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Federal Reserve Bank of Richmond seeks a Senior IGA Engineer to design, develop, and deploy Saviynt EIC solutions across enterprise IGA use cases. You will implement JML processes, automated provisioning, and access governance, partnering with IAM, cybersecurity, and HR to deliver secure identity controls.

The role requires hands-on Saviynt development, REST API/SCIM integrations, and strong problem-solving with incident management.

Qualifications

Hands-on Saviynt EIC development and configuration experience delivering production IGA capabilities at enterprise scale.
Ability to independently develop, configure, test, troubleshoot, and support Saviynt—not solely gather requirements, administer campaigns, or provide program governance.
Demonstrated experience building Saviynt application integrations and resolving connector, API, data mapping, reconciliation, import, and provisioning issues.
Hands-on implementation of identity lifecycle automation, including JML events, account creation, access changes, deprovisioning, and termination processing.
Hands-on experience with access requests, approval workflows, certifications, entitlement governance, and provisioning workflows.
Strong REST API, JSON, SQL, and integration troubleshooting skills.
Production support experience, including incident diagnosis, log analysis, root-cause analysis, defect remediation, and controlled releases.
Strong understanding of IAM/IGA principles including least privilege, RBAC, SoD, access governance, authoritative sources, identity correlation, and lifecycle controls.

Responsibilities

Design, configure, develop, test, deploy, and maintain Saviynt EIC solutions supporting enterprise IGA use cases.
Build and enhance Joiner/Mover/Leaver (JML) lifecycle processes, birthright access, automated provisioning/deprovisioning, and termination controls.
Configure and develop access request workflows, approval chains, entitlement governance, access policies, roles, user manager structures, and delegated administration.
Develop and maintain access certification campaigns, reviewer logic, escalation paths, remediation workflows, and certification reporting.
Onboard SaaS, cloud, database, directory, and enterprise applications using Saviynt connectors and custom integration patterns.
Develop integrations using REST APIs, SCIM, JDBC/SQL, web services, file‑based feeds, scripting, and other supported integration methods.
Create and troubleshoot Saviynt workflows, rules, analytics, jobs, tasks, connection configurations, imports, provisioning actions, and technical controls.
Implement and support RBAC, role engineering, entitlement structures, access policies, Segregation of Duties (SoD) controls, and least‑privilege patterns.
Diagnose complex identity data, provisioning, reconciliation, connector, API, workflow, and performance issues across non‑production and production environments.
Create reusable engineering patterns, technical documentation, configuration standards, runbooks, test evidence, and deployment procedures.
Partner with IAM architecture, cybersecurity, application owners, infrastructure, HR, audit, and engineering teams to deliver end‑to‑end identity solutions.
Participate in code/configuration reviews, release management, incident/problem management, root‑cause analysis, and continuous platform improvement.
Mentor engineers and provide technical leadership on Saviynt implementation patterns, troubleshooting, and engineering quality.