The Senior Manager, IGA is a senior technical and client-facing leadership role
focused on driving Identity Governance and Administration engagements from
strategy through execution, with SailPoint and Saviynt as core platforms of
expertise. This role requires the ability to lead technical architecture design
sessions directly with clients – translating complex governance, compliance, and
identity lifecycle requirements into scalable IGA target-state architectures.
While IGA is the primary focus, the ideal candidate also brings working
knowledge of adjacent IAM domains, including Privileged Access Management (PAM)
and Access Management (SSO/MFA), to design cohesive, end-to-end identity
solutions. The successful candidate will serve as a trusted advisor to client
stakeholders, architect enterprise-grade IGA solutions, and lead
cross-functional delivery teams, while also contributing to business
development, proposal development, and practice growth.
Key Responsibilities:
Lead technical architecture design sessions directly with clients,
translating business, security, and compliance requirements into scalable IGA
target-state architectures.
Architect and oversee end-to-end implementation of Identity Governance and
Administration (IGA) solutions using SailPoint and Saviynt as primary
platforms.
Design and lead delivery of core IGA capabilities, including identity
lifecycle management (Joiner/Mover/Leaver), access certification/attestation
campaigns, role-based access control (RBAC) and role mining, Segregation of
Duties (SoD) policy design, entitlement management, and access
request/approval workflows.
Lead application onboarding strategy for IGA platforms, including
source/target connector design, birthright and non-birthright provisioning,
and integration with authoritative HR sources
Define and implement IGA governance frameworks, including policy design,
audit and compliance reporting, and global configuration/data segmentation
best practices.
Working knowledge of adjacent IAM domains – Privileged Access Management
(PAM, e.g., CyberArk, Delinea) and Access Management (SSO/MFA via Entra ID,
Okta, Ping) – to ensure IGA architectures integrate cleanly across the
broader identity ecosystem.
Own end-to-end delivery for engagements, managing scope, timelines, technical
quality, and client satisfaction.
Serve as the primary technical point of contact for clients, running
architecture workshops, discovery sessions, and executive-level readouts.
Develop maturity assessments, governance roadmaps, and target operating
models tailored to client environments and industry (e.g., healthcare, higher
education, financial services).
Provide technical leadership, mentorship, and career development to IAM
engineers, architects, and consultants on the delivery team.
Partner with sales and account teams on business development activities,
including solution scoping, proposal/SOW development, and technical
presentations for prospective clients.
Advise clients on regulatory and compliance considerations (e.g., SOX, HIPAA,
GDPR) as they relate to identity governance controls, certifications, and
audits.
Monitor emerging IGA trends and best practices (including AI-driven
governance) and champion their adoption across client engagements.
Qualifications:
Bachelor’s degree in Computer Science, Information Security, or a related
field.
10+ years of hands-on IAM experience with a strong concentration in Identity
Governance and Administration (IGA), including consulting or client-facing
delivery, and at least 3-5 years in a technical leadership or architecture
role.
Deep, hands-on expertise architecting and implementing SailPoint and Saviynt,
including certification campaigns, RBAC/SoD design, connector configuration,
and workflow customization.
Strong understanding of identity lifecycle management, entitlement
governance, access certification processes, and provisioning/de-provisioning
across enterprise applications.
Working knowledge of PAM concepts and platforms (e.g., CyberArk, Delinea,
BeyondTrust) and Access Management/SSO technologies (e.g., Entra ID, Okta,
Ping) sufficient to architect integrated IAM solutions.
Proven ability to lead technical architecture discussions and design sessions
directly with client stakeholders, including CISOs and IT leadership.
Solid understanding of identity protocols and standards, including SAML,
OAuth 2.0, OpenID Connect, SCIM, and LDAP.
Experience managing project resources, timelines, and deliverables across
multiple concurrent engagements.
Demonstrated experience mentoring and developing technical teams, with strong
people leadership skills.
Excellent communication, presentation, and stakeholder management skills,
with the ability to translate complex technical concepts for both technical
and executive audiences.
Relevant certifications strongly preferred (e.g., CISSP, CISM, SailPoint
Certified, Saviynt Certified Professional).
Your recruiter will be happy to walk you through your U.S.-specific benefits,
which include:
Healthcare Coverage: Comprehensive medical, dental, and vision plans.
Time Off and Leave Policies: Generous paid time off (PTO), paid company
holidays, generous parental and family leave.
Protective Insurances: Life insurance, short- and long-term disability
coverage, and accident protection.
Compensation and Rewards: Competitive salary structures, performance-based
incentives, and merit-based compensation reviews.
Retirement Plans: 401(k) plans with company matching.
Please note that benefits may vary by region, department and role. We encourage
you to speak with your recruiter to learn more about the specific benefits
available for your position.
About Kroll
Join the global leader in risk and financial advisory solutions—Kroll. With a
nearly century-long legacy, we blend trusted expertise with cutting-edge
technology to navigate and redefine industry complexities. As a part of One
Team, One Kroll, you'll contribute to a collaborative and empowering
environment, propelling your career to new heights. Ready to build, protect,
restore and maximize our clients’ value? Your journey begins with Kroll.
In order to be considered for a position, you must formally apply via
careers.kroll.com.
We are proud to be an equal opportunity employer and will consider all qualified
applicants regardless of gender, gender identity, race, religion, color,
nationality, ethnic origin, sexual orientation, marital status, veteran status,
age or disability.
The current salary range for this position is $175,000 to $200,000
#LI-CN1
#LI-Remote