Senior Identity Access Management Engineer

Kontoor Brands; United States; Remote; USD 125,000 - 145,000; Full time

Job summary

An innovative company is seeking a Senior Identity Access Management Engineer to lead IAM solutions and architecture. This role involves implementing Saviynt solutions, mentoring junior staff, and collaborating with various stakeholders to ensure compliance and security within the SAP ecosystem. The position offers the flexibility of remote work and a competitive salary, making it an exciting opportunity for those looking to make a significant impact in identity management. Join a dynamic team that values equity and diversity, and contribute to a culture that promotes individual and collective potential.

Benefits

Medical, Dental, and Vision Plans

Employee Assistance Program (EAP)

Paid Time Off

Employee discounts

401K Match up to 6%

Tuition Reimbursement

Paid Parental Leave

Qualifications

• 5+ years of experience designing IGA solutions with Saviynt.
• Strong knowledge of IAM/PAM tools and cloud technologies.

Responsibilities

• Implement and manage Saviynt solutions, leading IAM architecture.
• Mentor junior engineers and manage stakeholder relationships.

Skills

Saviynt

Active Directory

Azure AD

Java/J2EE

XML

REST/SOAP

CyberArk

Education

Bachelor's degree in Computer Science

Tools

Saviynt

IAM/PAM tools

Job description

Who We Are:

Kontoor Brands, Inc. (KTB) is the parent company of Wrangler, Lee, and Rock & Republic, with owned manufacturing facilities in Mexico and Nicaragua. Kontoor also operates over 140 retail stores globally. Our company employs more than 15,000 people across 65 countries, with headquarters in Greensboro, North Carolina, and regional offices in Geneva and Hong Kong.

Job Posting:

Senior Identity Access Management Engineer - Greensboro, NC

Duties:

1. Implement and manage Saviynt solutions.
2. Perform assessments, develop IGA roadmaps, shape deployment proposals, and create SOPs and templates as a subject matter expert.
3. Mentor and guide junior engineers, providing feedback on engineering tasks.
4. Take ownership of Kontoor's Identity Management services, leading architecture, design, implementation, and operations.
5. Address challenging situations daily, interacting with multiple stakeholders across the company.
6. Define, drive, and own the Identity and Access strategy within KTB's SAP ecosystem.
7. Design roles, authorizations, and data restrictions aligned with IAM strategies.
8. Communicate with business, IT, and audit teams to ensure compliance with IAM and SAP role requirements.
9. Collaborate with technical and functional teams, as well as enterprise architects, to build consistent IAM models.
10. Advise leadership and project teams on SAP IAM best practices.
11. Lead the design, development, testing, and implementation of IAM and security controls.
12. Ensure IAM architecture is integrated and aligned with overall systems architecture.
13. Promote centralized access management and automate provisioning and governance processes.
14. Manage IAM systems' administration, governance, compliance, and maintenance.
15. Innovate and implement comprehensive IAM solutions.
16. Partner with IT and business teams to gather requirements for new tools and systems.
17. Lead complex enterprise-scale Identity Management projects, ensuring high-quality delivery.
18. Assess future needs with stakeholders and plan capacity upgrades.
19. Research new IdM products and features to support growth and M&A activities.
20. Provide technical oversight and mentorship to mid-level and junior engineers.
21. Conduct research on competitive solutions and address customer objections effectively.
22. Apply technical expertise to create solutions, designs, and proofs of concept.
23. Manage IDM operations team both onshore and offshore.
24. Lead and manage IDM and Privileged Access Management teams, including performance and capacity planning.

Requirements:

Bachelor's degree in Computer Science, Information Systems, or related field, with 5+ years of experience designing and building IGA solutions involving Saviynt and similar tools. Experience must include:

• 5 years with connectors like Active Directory, Azure AD, JDBC, Exchange, Mainframe, web services, and SAP/Workday integration.
• 5 years with Saviynt workflows (joiner, leaver, mover).
• 5 years with SDLC processes.
• 4 years leading technical architecture and security discussions.
• 4 years managing stakeholder relationships during deployment projects.
• 5 years delivering projects using structured project management methodologies.
• 4 years managing support functions and SLAs.
• Knowledge of Java/J2EE, XML, web services (REST/SOAP), Saviynt database models, cloud technologies, and IAM/PAM tools like CyberArk.

Knowledge may be demonstrated through education, training, or experience.

Telework: Up to 100% remote in locations where Kontoor can legally employ individuals.

Travel: Up to 10% domestic travel.

Salary: $125,000 - $144,200/year.

Location: 400 N Elm St, Greensboro, NC, 27401.

What We Offer:

• Medical, Dental, and Vision Plans
• Employee Assistance Program (EAP)
• Paid Time Off
• Employee discounts
• 401K Match up to 6%
• Tuition Reimbursement
• Paid Parental Leave

Why Kontoor Brands?

We provide a comprehensive benefits package supporting your health, security, and wellbeing, including flexible work options, discounts, and parental leave. Our workplace culture promotes equity and belonging, harnessing our diverse, high-performing teams to unlock individual and collective potential.