CrawlJobs Logo

Senior Engineer – Identity Governance & Administration

beacontechinc.com Logo

Beacon Technologies

Location Icon

Location:
United States , Appleton

Category Icon

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided

Job Description:

Beacon Technologies is seeking a Senior Engineer – Identity Governance & Administration (IGA) for our client partner. As a Senior Engineer, you will serve as a technical expert in Identity Governance & Administration (IGA), responsible for designing and integrating solutions across the enterprise using Saviynt as the primary platform. You will determine specifications; plan, design, and develop software, integrations, and data pipelines that enable accurate role/entitlement models, automated governance workflows, and measurable compliance outcomes. Working independently and collaboratively within a product team, you’ll deliver scalable, resilient capabilities while mentoring engineers and defining patterns that raise the bar for system excellence. The role can be remote, but will need to be onsite in Appleton, WI 2-3 times/year.

Job Responsibility:

  • Lead engineering of RBAC/ABAC models in Saviynt, including naming conventions, hierarchical role taxonomies, inheritance, and lifecycle controls
  • Translate Segregation of Duties requirements into enforceable Saviynt policies, risk models, and control rules
  • design analytics and alerting to detect violations
  • Define source-of-truth and reconciliation strategies
  • model identity attributes and entitlement relationships to support clean access patterns
  • Architect and document integrations with HRIS (e.g., Workday), directories (AD/AAD), and key SaaS applications using APIs and standardized connectors
  • Build and maintain ETL/ELT pipelines for identity data
  • implement data quality checks and schema evolution strategies
  • Develop scripts (PowerShell/Bash/Python) and Saviynt workflows to automate provisioning, role assignments, certifications, and evidence collection
  • Configure roles, entitlements, policies, approval flows, and campaigns in Saviynt
  • stabilize vendor-led implementations
  • Deliver software and configurations that meet/exceed expectations for stability, scalability, resilience, and maintainability
  • Participate in product planning, backlog refinement, and technical design reviews
  • Establish standards for configuration-as-code, code review practices, and environment promotion
  • Promote CI/CD pipelines for IGA artifacts and implement observability for IGA services
  • Contribute to vendor/tool evaluations and collaborate with vendor engineering
  • Mentor engineers through code reviews, pairing, and targeted training
  • Engage in recruiting and foster a culture of continuous improvement

Requirements:

  • Bachelor’s degree in Computer Science, Information Systems, or equivalent experience
  • 7+ years in engineering environments delivering complex integrations and software solutions
  • 3+ years hands-on with IGA platforms (preferably Saviynt), including role mining, lifecycle governance, SoD policy design, and campaign configuration
  • Strong proficiency in SQL and scripting (PowerShell/Bash/Python)
  • Experience integrating HRIS (e.g., Workday) and directories (AD/AAD)

Nice to have:

  • Deep hands-on with Saviynt EIC and stabilizing complex vendor configurations
  • Experience in regulated industries (e.g., financial services) and familiarity with SOX/GLBA/PCI
  • Exposure to data engineering platforms and observability stacks
  • Security or audit certifications (CISSP, CISA, CRISC) or willingness to obtain within 24 months
What we offer:
  • Career advancement opportunities
  • Extensive training
  • Excellent benefits including paying for health and dental premiums for salaried employees

Additional Information:

Job Posted:
January 07, 2026

Employment Type:
Fulltime
Work Type:
Remote work
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Senior Engineer – Identity Governance & Administration

IAM Senior Engineer - Active Directory/Entra ID

HPE Global IT is seeking a highly skilled Senior Active Directory (AD), Entra ID...
Location
Location
India , Bangalore
Salary
Salary:
Not provided
https://www.hpe.com/ Logo
Hewlett Packard Enterprise
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
  • 10+ years of IT or cybersecurity experience
  • 7+ years focused on AD, Entra ID, and Azure identity engineering in enterprise-scale environments
  • Deep hands-on experience managing multi-forest AD environments (schema, replication, delegation, GPOs, DNS, DHCP)
  • Strong expertise with Entra ID and hybrid identity integration (Entra Connect / Cloud Sync, federation, SSO)
  • Hands-on experience with Azure governance, RBAC, PIM, and access policy enforcement
  • Experience implementing conditional access, passwordless, and phishing-resistant MFA in Entra and Azure
  • Proficiency in PowerShell scripting, Graph API, and Azure automation for identity management and reporting
  • Solid understanding of authentication protocols (Kerberos, NTLM, LDAP, SAML, OIDC, OAuth2)
  • Familiarity with Zero Trust, tiered admin models, and directory hardening practices
Job Responsibility
Job Responsibility
  • Engineer, deploy, and optimize Active Directory, Entra ID, and Azure identity services across enterprise-scale hybrid environments
  • Design and manage multi-forest AD architectures, including schema extensions, replication, delegation, and hardening
  • Implement and maintain cross-domain and cross-tenant synchronization between AD and Entra ID using Entra Connect or Cloud Sync
  • Engineer secure authentication and federation flows leveraging Kerberos, NTLM, SAML, OIDC, and OAuth2
  • Implement and enhance conditional access, MFA, passwordless, and FIDO2 authentication methods in Entra and Azure environments
  • Support Zero Trust Directory Security through tiered administration, least privilege, and delegated access controls
  • Partner with cloud and infrastructure teams to ensure secure integration of Azure resources with enterprise identity services
  • Maintain and secure domain controllers, DNS, DHCP, and Group Policy Objects (GPOs) across global environments
  • Manage Azure AD tenants, subscriptions, and resource access controls (RBAC, PIM, Entra roles)
  • Integrate on-prem AD with Azure workloads, Microsoft 365, Intune, and other SaaS applications
What we offer
What we offer
  • Health & Wellbeing benefits
  • Personal & Professional Development programs
  • Unconditional Inclusion environment
  • Comprehensive suite of benefits supporting physical, financial and emotional wellbeing
  • Fulltime
Read More
Arrow Right

Senior Detection Engineer

This is a detection engineering role that leverages knowledge of monitoring, ana...
Location
Location
Singapore , Singapore
Salary
Salary:
Not provided
https://www.marriott.com Logo
Marriott Bonvoy
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
  • 3+ years of collective experience in Splunk SIEM (Splunk Enterprise Security) threat detection use case development or UEBA (Exabeam) use case development for insider threat use case development
  • 5+ years of experience in security functions such as SOC, CIRT, security engineering, risk management, vulnerability management or technical infrastructure operations, administration, or systems engineering
  • scripting or programming language, including Python
  • Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) preferred
  • offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications preferred
  • Splunk Certification, including Splunk Enterprise Security Certified Admin preferred
  • use case development experience on the Exabeam platform preferred
  • working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022 preferred
  • working knowledge of the MITRE ATT&CK Framework preferred
Job Responsibility
Job Responsibility
  • Lead collaboration sessions within the cyber security tower and other business units to devise security monitoring use cases
  • engage and collaborate with other security engineers and architects as needed to keep pace with the evolution of corporate infrastructure and applications and share that knowledge with peers as appropriate
  • document prospective security monitoring use cases with MITRE ATT&ACK mappings using standard templates and methodologies
  • inform and consult other cyber ops teams of required data onboarding and integrations for use case development
  • develop analytics, correlation searches, dashboards, reports and alerts within the SIEM and UEBA platforms
  • solicit feedback for pre-production security monitoring content through peer review process and user acceptance testing for tuning
  • document developed security monitoring content in a documentation registry using department standard templates and methodologies
  • manage field mapping and transmission of security monitoring alerts to the security incident response platform for SOC analyst consumption as outlined in process documentation
  • provide governance support for the content development function entailing content development standards compliance, change management approvals for SIEM or UEBA content, and lifecycle management of developed security monitoring content
  • service operational requests in queue such as analytics content performance tuning, filtering, search refinement, parsing issues
  • Fulltime
Read More
Arrow Right

Senior System Information Assurance and Security Engineer

Barbaricum is seeking a highly skilled System Information Assurance and Security...
Location
Location
United States , Tampa
Salary
Salary:
Not provided
barbaricum.com Logo
Barbaricum
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Active DoD TS/SCI Clearance
  • Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field (Master’s preferred)
  • 10+ years of experience in enterprise identity and access management architecture
  • Demonstrated expertise with Zero Trust frameworks and DoD ICAM standards
  • Hands-on experience with SAML, OAuth2.0, OpenID Connect, PKI, and certificate management
  • Experience with DoD enterprise solutions such as Radiant Logic, Okta, Ping Identity, SailPoint, ForgeRock, Microsoft Entra ID (Azure AD), or equivalent
  • Deep knowledge of Privileged Access Management and Identity Governance & Administration solutions
  • Strong understanding of DoD cybersecurity compliance frameworks (RMF, NIST SP 800-53, 800-207, 8140/8570)
  • IAM / DoD Certification IAT Level II (e.g., Security+ CE, SSCP, GSEC)
Job Responsibility
Job Responsibility
  • Execute engineering solutions for identity credential and access management for Zero Trust implementation across enterprise systems
  • Design and maintain an enterprise-wide identity and access management strategy aligned with DoD Zero Trust principles, NIST 800-207, and DoD ICAM Reference Design
  • Lead integration of federated identity, single sign-on (SSO), and multi-factor authentication (MFA) across cloud and on-prem environments
  • Develop and maintain policies, standards, and reference architectures to enforce least-privilege and attribute-based access control (ABAC)
  • Conduct the implementation of Privileged Access Management (PAM) and Identity Governance and Administration (IGA) solutions
  • Collaborate with cybersecurity, network, and cloud teams to align ICAM solutions with Zero Trust pillars (identity, device, network, application, and data)
  • Ensure compliance with DoD 8140/8570, RMF, FedRAMP, and other applicable frameworks
  • Lead proof-of-concepts (POCs) and technology evaluations for emerging identity
Read More
Arrow Right

Senior System Security and Information Assurance Engineer

The Senior PAM Engineer will play a critical role within Line of Effort 2, respo...
Location
Location
United States , Tampa
Salary
Salary:
Not provided
barbaricum.com Logo
Barbaricum
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Active DoD Top Secret clearance with SCI eligibility
  • Master’s degree (MA/MS) in Cybersecurity, Information Technology, Computer Science, Engineering, or related field
  • 10+ years of professional experience in cybersecurity, systems engineering, or information assurance
  • Meets Cyber Engineer – Senior labor category requirements, including independent execution of all functional duties and support to mission-critical program elements
  • DoD 8570 IAT Level II certification or higher (e.g., Security+ CE, CCNA Security)
  • Deep expertise in Privileged Access Management (PAM) architectures and Zero Standing Privilege concepts
  • Hands-on experience implementing Just-In-Time (JIT) access workflows
  • Experience integrating PAM solutions with Active Directory, SIEM platforms (Splunk), and Identity Governance (IGA) tools
  • Experience producing technical documentation to support RMF and ATO processes (LLDs, SSPs, SOPs)
  • Ability to lead or oversee the efforts of less senior staff as required by program needs
Job Responsibility
Job Responsibility
  • Lead the installation, configuration, and technical implementation of an enterprise Privileged Access Management (PAM) solution (Delinea-focused) across multiple network enclaves
  • Discover, inventory, and onboard privileged user, administrator, and service accounts into a secure credential vault
  • Design and enforce policies for Just-In-Time (JIT) access, session monitoring, and session recording to achieve zero standing privileges
  • Develop scripts and API-based integrations between the PAM solution, Splunk SIEM, and Identity Governance (IGA) platforms
  • Support RMF accreditation activities by developing Low-Level Design (LLD) documents, System Security Plans (SSPs), and Standard Operating Procedures (SOPs)
  • Support Authority to Operate (ATO) efforts through security control implementation and technical validation
  • Lead enterprise rollout of PAM policies from pilot groups to full operational enforcement
  • Collaborate with Zero Trust architects, identity teams, and cyber engineers to ensure alignment with enterprise security architecture
Read More
Arrow Right

IT Infrastructure Architect

Alter Domus is looking for a talented IT Infrastructure Architect to enhance our...
Location
Location
Lithuania , Vilnius
Salary
Salary:
4750.00 - 7083.00 EUR / Month
alterdomus.com Logo
Alter Domus
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • At least 10 years of IT experience in financial industry, as an architect or senior engineer
  • Strong technical knowledge of Microsoft technologies, including server and client OS, Active Directory, SQL, EntraID, PKI, Microsoft 365 (OneDrive, SharePoint Online, Exchange Online, Intune)
  • Detailed technical knowledge of Citrix solutions
  • Experience in implementing Identity Governance and Administration solutions
  • Experience in implementing or managing datacenters and virtual environments
  • Experience in Collaboration and Communication solutions
  • Advanced technical knowledge of network related technologies (WAN, SD-WAN, LAN, Datacenter)
  • Managed Services and Cloud experience (Azure and AWS)
  • Familiar with ITIL framework, tickets and Change management and associated workflows
  • Strong understanding or experience of backup technologies and principles
Job Responsibility
Job Responsibility
  • Review, define and document new components of Alter Domus platform
  • Ensure that delivered solution are compliant with established standard
  • Establish strategic technology roadmap in line with application strategy and Business requirements
  • Manage relationship with key stakeholders in IT and external parties
  • Provide IT solutions to business requirements whilst aligning to IT strategies and standards
  • Facilitate sharing and alignment of knowledge & best practice with IT areas
  • Provide support to all IT group teams to provide guidance in different steps of projects
  • Work with the software architect team to adapt the infrastructure based on development requirements
  • Define new infrastructure security standards for new applications (cloud and on premise)
  • Anticipate and evaluate architecture risks
What we offer
What we offer
  • Support for professional accreditations such as ACCA and study leave
  • Flexible arrangements, generous holidays, plus an additional day off for your birthday
  • Continuous mentoring along your career progression
  • Active sports, events and social committees across our offices
  • 24/7 support available from our Employee Assistance Program
  • The opportunity to invest in our growth and success through our Employee Share Plan
  • Plus additional local benefits depending on your location
  • Fulltime
Read More
Arrow Right

Senior Security Operations Engineer

The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions t...
Location
Location
United States , Multiple Locations
Salary
Salary:
119800.00 - 234700.00 USD / Year
https://www.microsoft.com/ Logo
Microsoft Corporation
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Doctorate in Statistics, Mathematics, Computer Science, or related field
  • Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
  • Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
  • equivalent experience
  • Ability to meet Microsoft, customer and/or government security screening requirements
  • 6+ years of hands‑on experience or leading engineering functions administering Microsoft Entra ID (Azure AD), covering identity management, application integrations, group and entitlement management, and end‑to‑end lifecycle processes for directory and access components
  • 5+ years experience managing Windows/Azure Virtual Desktop or similar virtualization technologies within an enterprise environment
  • 5+ years of experience administering on‑premises Active Directory, including user, group, and computer management, Group Policy administration, PowerShell, and structured OU governance
  • and experience driving hybrid identity digital transformation for an enterprise
  • 5+ years of experience in resolving complex identity incidents, applying advanced Tier 2/3 expertise, rigorous root cause analysis, and dependable enterprise-level on call support across Active Directory, Entra ID, and AVD
Job Responsibility
Job Responsibility
  • Drive Identity Lifecycle Management across On-Prem Active Directory and Entra
  • Administer and troubleshoot Active Directory and Entra AD Identities, GPOs, OUs, Groups, and Devices
  • Ensure Secure Access & Compliance oversee identity governance for Entra Online, and guest accounts lifecycle
  • Lead Advanced Troubleshooting & Escalations while participating in on-call rotations and direct end user support
  • Resolve complex identity-related incidents and provide Tier 2/Tier 3 support for critical issues
  • Enable Automation & Innovation by developing PowerShell scripts, building workflows with Power Automate/Apps, and integrating support ticketing systems for operational efficiency
  • Innovate with AI-driven automation for ticket triage, predictive identity health, compliance evidence generation, and identify areas of self-help automation
  • Deliver Insights & Service Improvements by creating Power BI dashboards for KPIs and SLA adherence, analyzing customer sentiment, and enhancing knowledge bases through dynamic content automation
  • Fulltime
Read More
Arrow Right

Senior Engineer, Infrastructure

The Sr. Engineer, Infrastructure, supports endpoints, cloud infrastructure, and ...
Location
Location
Canada
Salary
Salary:
Not provided
atlashxm.com Logo
ATLAS
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 7+ years of system engineering experience supporting enterprise environments
  • Proficiency in endpoint administration using Microsoft Intune and Mosyle across Windows and macOS
  • Strong Entra ID (Azure AD) administration skills, including IAM, conditional access, and RBAC
  • Expertise with Microsoft Windows OS, PowerShell, O365, and SharePoint administration
  • Optimize Zendesk configurations and integrations to improve support workflows, reporting, and user experience
  • Solid understanding of Azure cloud infrastructure, networking, and security implementations
  • Experience with federated identity models (SSO, SAML, OAuth, MFA) and modern authentication frameworks
  • Provide macOS administration and support, managing device configuration, updates, security settings, and troubleshooting for Apple endpoints across the organization
Job Responsibility
Job Responsibility
  • Perform Azure and Entra ID administration, including identity and access management, conditional access policies, RBAC configuration, and enterprise IAM governance
  • Administer and support Microsoft 365, SharePoint, and Azure environments, ensuring secure policies, proper role assignments, and reliable performance across all services
  • Lead Zendesk configuration updates, optimization efforts, and enhancements while partnering with support teams to improve processes, reporting, and user experience
  • Partner with Information Security teams to validate that enterprise security controls, monitoring tools, and compliance requirements are implemented and functioning effectively
  • Install, configure, and maintain enterprise applications, endpoint software, and security tools supporting organizational operations
  • Provide Tier 2/Tier 3 technical support, guiding the helpdesk team through escalations, root-cause analysis, and complex troubleshooting
  • Manage and troubleshoot Azure networking components, including VNets, subnets, NSGs, VPN gateways, private endpoints, and routing, ensuring secure, reliable connectivity across cloud and on-prem environments
  • Contribute to security, privacy, and compliance initiatives, including ISO 27001 operational processes
  • Maintain accurate documentation for systems, configurations, procedures, access controls, and operational runbooks
  • Generate and deliver regular KPI, system health, and operational performance reports
What we offer
What we offer
  • A diverse and inclusive environment
  • Country-specific benefits
  • Flexible PTO
  • Your birthday off and a day for you to volunteer and give back to the organization of your choice
  • Generous Parental Leave Program
  • Growth and development opportunities with access to a top learning content provider
Read More
Arrow Right

Senior Engineer, Infrastructure

The Sr. Engineer, Infrastrcuture, supports endpoints, cloud infrastructure, and ...
Location
Location
United States of America
Salary
Salary:
Not provided
atlashxm.com Logo
ATLAS
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 7+ years of system engineering experience supporting enterprise environments
  • Proficiency in endpoint administration using Microsoft Intune and Mosyle across Windows and macOS
  • Strong Entra ID (Azure AD) administration skills, including IAM, conditional access, and RBAC
  • Expertise with Microsoft Windows OS, PowerShell, O365, and SharePoint administration
  • Optimize Zendesk configurations and integrations to improve support workflows, reporting, and user experience
  • Solid understanding of Azure cloud infrastructure, networking, and security implementations
  • Experience with federated identity models (SSO, SAML, OAuth, MFA) and modern authentication frameworks
  • Provide macOS administration and support, managing device configuration, updates, security settings, and troubleshooting for Apple endpoints across the organization
Job Responsibility
Job Responsibility
  • Perform Azure and Entra ID administration, including identity and access management, conditional access policies, RBAC configuration, and enterprise IAM governance
  • Administer and support Microsoft 365, SharePoint, and Azure environments, ensuring secure policies, proper role assignments, and reliable performance across all services
  • Lead Zendesk configuration updates, optimization efforts, and enhancements while partnering with support teams to improve processes, reporting, and user experience
  • Partner with Information Security teams to validate that enterprise security controls, monitoring tools, and compliance requirements are implemented and functioning effectively
  • Install, configure, and maintain enterprise applications, endpoint software, and security tools supporting organizational operations
  • Provide Tier 2/Tier 3 technical support, guiding the helpdesk team through escalations, root-cause analysis, and complex troubleshooting
  • Manage and troubleshoot Azure networking components, including VNets, subnets, NSGs, VPN gateways, private endpoints, and routing, ensuring secure, reliable connectivity across cloud and on-prem environments
  • Contribute to security, privacy, and compliance initiatives, including ISO 27001 operational processes
  • Maintain accurate documentation for systems, configurations, procedures, access controls, and operational runbooks
  • Generate and deliver regular KPI, system health, and operational performance reports
What we offer
What we offer
  • The opportunity to work with a purpose — simplifying global expansion across borders and cultures
  • A diverse and inclusive environment
  • Country-specific benefits
  • Flexible PTO
  • Your birthday off and a day for you to volunteer and give back to the organization of your choice
  • Generous Parental Leave Program
  • Growth and development opportunities with access to a top learning content provider
Read More
Arrow Right