Note: The job is a remote job and is open to candidates in USA. Xerox is a technology and services company delivering digitally driven workplace solutions. The Identity & Access Management Engineering Manager will provide technical leadership for enterprise IAM capabilities, lead IAM security engineers, and oversee the implementation of Saviynt-based security solutions, projects, processes, and controls.
Responsibilities
- Lead, mentor, and oversee a team of four Security Engineers specializing in Identity and Access Management
- Engineer, develop, and maintain enterprise IAM solutions using Saviynt IGA and Delinea Secret Server Cloud, formerly Thycotic PAM
- Develop new application integrations, account connectors, and entitlement connectors within the Saviynt platform
- Design and develop Saviynt access-request forms based on business and operational requirements
- Support the onboarding of new applications to the Saviynt IGA platform
- Enhance access-review definitions and generate quarterly certification reviews to support audit requirements
- Verify that user access and application entitlements align with each employee’s business role and job responsibilities
- Remediate access when it is no longer required and conduct regular access reviews and audits to maintain compliance with security policies
- Configure Saviynt workflows, birthright access rules, provisioning processes, and XML jobs
- Respond to and resolve security incidents involving privileged access in a timely manner
- Lead the implementation and delivery of enterprise IAM security projects
- Collaborate with IAM engineers, architects, IT teams, business partners, and other cybersecurity professionals on major initiatives
- Maintain IAM technical documentation, code repositories, and development environments
- Provide technical guidance to the IAM operations team and serve as an escalation point for operational incidents
- Serve as a technical subject matter expert and advise project teams on integrations with IAM technologies
- Make technical and operational decisions on behalf of the IAM engineering team
Skills
- **Location:** Remote – United States (Eastern or Central Time Zone)
- **Schedule:** Full-Time, Days, Monday-Friday
- * At least five years of experience in IT services or the IAM domain, with a focus on Saviynt IGA implementations
- * Hands-on Saviynt IGA development experience
- * Experience developing or implementing one or more of the following Saviynt components:
- + Build Warehouse
- + Access Request System (ARS)
- + Rule Management
- + User Provisioning
- + Access Certification
- + Identity Analytics
- + Segregation of Duties (SOD)
- * Experience with Saviynt capabilities such as:
- + Application onboarding
- + Provisioning and deprovisioning
- + Birthright provisioning
- + Application workflows
- + Analytics and reporting services
- + Delegation
- * Can configure workflows and birthright rules supporting user onboarding within Saviynt
- * Experience creating XML jobs in the Saviynt IAM platform
- * Proficient in Java programming and database SQL scripting
- * Experience collaborating across multiple teams to deliver complex projects
- * Strong written and verbal communication skills
- * Highly organized, detail-oriented, and able to manage competing priorities
- * Can demonstrate uncompromising personal and professional integrity and ethics
- * Bachelor's degree in Computer Science, Information Systems, Information Security, Engineering, or a related field
- * Saviynt IGA L100 and L200 certifications
- * Industry-recognized security or IAM certification, such as CISSP
- * Experience with privileged access management solutions, particularly Delinea Secret Server Cloud
- * Previous experience leading or managing IAM security engineers
- * Experience supporting IAM programs within a large, complex enterprise environment
Benefits
- Remote work in the United States (Eastern or Central Time Zone)
Company Overview
Company H1B Sponsorship