Senior Identity Access Management Engineer

Kontoor Brands, Inc.; United States; Remote; USD 125,000 - 145,000; Full time

Job summary

An established industry player is seeking a Senior Identity Access Management Engineer to join their dynamic team in Greensboro, NC. This role involves leading the implementation of Saviynt solutions and managing IAM architecture to ensure compliance and security across the organization. With the flexibility of remote work and a comprehensive benefits package, this position offers a unique opportunity to influence identity management strategies while collaborating with cross-functional teams. If you're passionate about security and eager to drive innovative IAM concepts, this is the perfect role for you.

Benefits

Medical, Dental, and Vision Plans

Employee Assistance Program (EAP)

Paid Time Off

Employee discounts

401K Match up to 6%

Tuition Reimbursement

Paid Parental Leave

Qualifications

• 5+ years of experience designing and architecting IGA solutions.
• Knowledge of Saviynt and various connectors like SAP and Workday.
• Experience in managing stakeholder relationships during complex projects.

Responsibilities

• Implement and manage Saviynt solutions and IAM architecture.
• Lead enterprise-scale Identity Management projects.
• Collaborate with teams to ensure compliance with IAM designs.

Skills

Saviynt

Active Directory

Azure AD

Java/J2EE

XML

REST/SOAP

IAM/PAM tools

Education

Bachelor's degree in Computer Science

Information Systems

Tools

Saviynt workflows

IDM operations

Cloud computing

Job description

Who We Are:

Kontoor Brands, Inc. (KTB) is the parent company of Wrangler, Lee, and Rock & Republic, with manufacturing facilities in Mexico and Nicaragua. Kontoor also operates over 140 retail stores globally. Our company employs more than 15,000 people across 65 countries, with headquarters in Greensboro, North Carolina, and regional offices in Geneva and Hong Kong.

Job Posting:

Senior Identity Access Management Engineer – Greensboro, NC

Duties:

1. Implement and manage Saviynt solutions.
2. Assess IGA roadmap, help shape deployment proposals, SOWs, SOPs, and develop templates as a subject matter expert.
3. Mentor and guide junior engineers; provide feedback on engineering tasks.
4. Own the technical aspects of Kontoor’s Identity Management services, including architecture, design, and operations.
5. Handle challenging situations and interact with multiple stakeholders across teams.
6. Define, drive, and own the Identity and Access strategy for KTB’s SAP ecosystem.
7. Design roles, authorizations, and data restrictions aligned with IAM strategy.
8. Communicate with business, IT, and audit teams to ensure compliance and alignment of IAM designs.
9. Collaborate with technical teams and architects to build consistent application roles and IAM models.
10. Advise leadership and project teams on SAP IAM best practices.
11. Lead the design, development, testing, and implementation of IAM and security controls.
12. Ensure IAM architecture is integrated and optimized within the overall systems architecture.
13. Promote centralized access management and automation of provisioning and governance.
14. Manage IAM systems, governance, compliance, and maintenance.
15. Develop innovative IAM concepts and implementations.
16. Partner with IT and business teams for new tools and system integrations.
17. Lead enterprise-scale Identity Management projects.
18. Plan for future needs and capacity upgrades.
19. Research new IdM products and features to support growth.
20. Provide technical oversight to mid-level and junior engineers.
21. Conduct research and address customer objections with knowledge of solutions.
22. Provide expertise in creating solutions, designs, and proof of concepts.
23. Manage IDM operations teams both onshore and offshore.
24. Lead and manage IDM and Privileged Access Management teams, including performance and capacity planning.

Requirements:

Bachelor’s degree in Computer Science, Information Systems, or related field, with 5+ years of experience designing, architecting, and building IGA solutions involving Saviynt and other IGA tools. Experience should include:

• 5 years with connectors like Active Directory, Azure AD, JDBC, Exchange, Mainframe, web services, and authoritative sources such as SAP and Workday.
• 5 years with Saviynt workflows (joiner, leaver, mover).
• 5 years in SDLC processes.
• 4 years in leading technical architecture and security discussions.
• 4 years in managing stakeholder relationships during complex deployment projects.
• 5 years of project delivery experience, including planning and estimating.
• 4 years managing support functions and SLAs.
• Knowledge of Java/J2EE, Beanshell, XML, web services (REST/SOAP), Saviynt database models, cloud computing, and IAM/PAM tools.

Additional details:

• Remote work possible up to 100%; location in the U.S. where Kontoor can employ.
• Up to 10% domestic travel.

Salary range: $125,000 to $144,200/year

Location: 400 N Elm St, Greensboro, NC, 27401

What We Offer:

• Medical, Dental, and Vision Plans
• Employee Assistance Program (EAP)
• Paid Time Off
• Employee discounts
• 401K Match up to 6%
• Tuition Reimbursement
• Paid Parental Leave

Why Kontoor Brands?

We provide a comprehensive benefits package supporting your physical, emotional, social, and financial wellbeing. Our culture promotes equitable opportunities and belonging, with a global workforce that values collaboration and individual uniqueness.