Senior IAM Architect – SailPoint & Saviynt Specialist

EY; Minneapolis (MN); Hybrid; USD 115,000 - 266,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Job summary

EY is seeking a Senior IAM Consultant to design, engineer, maintain, and troubleshoot Enterprise Employee Solutions across the IAM spectrum. You will implement and optimize solutions using Saviynt, SailPoint IIQ/ISC, and Entra ID governance, collaborating with cross-functional teams to address global cybersecurity challenges.

You will translate business requirements into technical specifications, leveraging AD, LDAP, SSO, MFA, and REST APIs to deliver secure identity and access management.

Qualifications

• Hands-on experience with one or more IAM platforms (e.g., SailPoint IIQ/ISC, Saviynt).
• Knowledge of AD, Entra ID, LDAP, SSO, MFA integration and governance.
• Experience with access reviews, entitlement governance, and provisioning workflows.
• Familiarity with regulatory and audit-driven IAM controls.

Responsibilities

• Develop Saviynt / SailPoint IIQ policies and configure rules for policy violations.
• Configure connectors, custom rules, workflows, and third-party integrations.
• Implement, manage, and maintain IAM tools across enterprise environments.
• Design and architect IAM solutions aligning business needs with technical delivery.

Skills

Identity Governance

SailPoint IIQ

SailPoint ISC

Saviynt EIC

Entra ID Governance

RBAC governance

SoD controls

MFA

SSO

REST APIs

Azure AD

Tools

Saviynt

SailPoint IIQ

SailPoint ISC

Saviynt EIC

Entra ID / Azure AD

Job description

EY is seeking a Senior IAM Consultant to design, engineer, maintain, and troubleshoot Enterprise Employee Solutions across the IAM spectrum. You will implement and optimize solutions using Saviynt, SailPoint IIQ/ISC, and Entra ID governance, collaborating with cross-functional teams to address global cybersecurity challenges.

You will translate business requirements into technical specifications, leveraging AD, LDAP, SSO, MFA, and REST APIs to deliver secure identity and access management.