CrawlJobs Logo
Citizens Bank Logo Citizens Bank · IT - Software Development

Senior IGA Engineer

United States, Plano 114000.00 - 152000.00 USD / Year · Job Posted April 11, 2026
Apply Position
Job Link Share

Job Description

Senior IGA Engineer IAM Role Summary: We are seeking a highly motivated, self starting Senior IGA Engineer to design, build, and support Identity Governance and Administration solutions with a strong emphasis on privileged access controls and automation. This role is hands on and delivery focused, partnering closely with security, infrastructure, and application teams to implement scalable and secure IGA capabilities. The Senior IGA Engineer will lead technical execution, contribute to standards and best practices, and mentor others, but will not be accountable for enterprise wide IAM architecture ownership.

Job Responsibility

  • Design, implement, and support IGA and privileged access management solutions in alignment with established security standards
  • Lead technical execution of IGA initiatives, including onboarding applications, workflows, certifications, and access controls
  • Contribute to the definition and improvement of standards, processes, and documentation supporting IAM and IGA solutions
  • Identify and implement opportunities for automation across identity lifecycle and access governance processes
  • Build and enhance IGA environments, including greenfield or expansion implementations
  • Collaborate with security architecture, engineering, and operations teams to ensure solutions integrate cleanly across platforms
  • Provide technical guidance and knowledge sharing with peers and junior engineers
  • Troubleshoot complex identity, access, and integration issues across platforms and environments
  • Effectively manage multiple priorities in a fast paced and evolving environment

Requirements

  • Strong systems engineering experience with emphasis on IGA, IDM, BPM, workflow, and process engineering
  • Experience supporting cloud based and hybrid deployments including AWS and Azure
  • Seven or more years of hands on experience with one or more IGA platforms such as SailPoint, Saviynt, ForgeRock IDM, Okta IGA, Omada, Entra ID, or similar tools
  • Strong understanding of Active Directory and Entra ID identity and access models
  • Hands on development experience with Java and JavaScript
  • Experience with CI CD pipelines and source controlled code deployments
  • Strong Bash or shell scripting skills
  • Experience integrating systems via APIs, including building custom integrations using Spring Boot or Node.js
  • Strong foundation in Linux and Windows systems administration
  • Experience working with relational databases, with strong preference for PostgreSQL
  • Ability to debug complex issues, analyze logs, and resolve production incidents efficiently
  • Intermediate to advanced PowerShell experience, with PowerShell 7 preferred
  • Strong communication skills with the ability to explain technical concepts clearly
  • Proven ability to balance competing priorities and meet deadlines in a dynamic environment
  • Bachelor’s degree required in a related technical field

Nice to have

  • Master’s degree preferred
  • Cloud or IAM related certifications preferred

What we offer

  • comprehensive medical, dental, and vision coverage
  • retirement benefits
  • maternity and paternity leave
  • flexible work arrangements
  • education reimbursement
  • wellness programs
  • Citizens paid time off exceeds local and state requirements
  • eligibility for an annual discretionary bonus
Citizens Bank - All Job Offers

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Suggested Tags: Frontend Developer Secretary Talent Manager Salesforce Administrator Data Analyst
Similar Jobs for

Senior IGA Engineer

8 matching positions

Identity Governance and Administration (IGA) Engineer

Barbaricum is seeking an Identity Governance and Administration (IGA) Engineer t...
Location
Location
United States , Tampa
Salary
Salary:
Not provided
barbaricum.com Logo
Barbaricum
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Active DoD Top Secret clearance with SCI eligibility
  • Bachelor’s or Master’s degree in Cybersecurity, Information Technology, Computer Science, or related field
  • 3–10 years of relevant experience (Journeyman) or 10+ years of experience (Senior)
  • Hands-on experience implementing and administering SailPoint identity governance solutions
  • Strong knowledge of Active Directory, LDAP, and Azure Active Directory structures and management
  • Experience implementing Role-Based Access Control (RBAC), Separation of Duties (SoD), and access certification processes
  • Required: CompTIA Security+ CE (DoD 8570 IAT Level II)
Job Responsibility
Job Responsibility
  • Deploy and administer SailPoint IdentityNow or IdentityIQ across enterprise environments
  • Design and automate identity lifecycle processes including Joiner, Mover, and Leaver (JML) workflows
  • Define and manage identity attribute schemas supporting Attribute-Based Access Control (ABAC) models
  • Implement access certification campaigns and governance processes to maintain compliance with audit requirements
  • Develop and maintain role-based and attribute-based access models within SailPoint
  • Integrate SailPoint with Active Directory, Azure Active Directory (Entra ID), and enterprise applications
  • Support synchronization of identity data across classified and unclassified networks
Read More
Arrow Right

Zero Trust IGA Engineer

We are seeking an IGA Engineer to support USSOCOM’s Zero Trust execution efforts...
Location
Location
United States , Tampa
Salary
Salary:
Not provided
barbaricum.com Logo
Barbaricum
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Active DoD Top Secret clearance with SCI eligibility
  • DoD 8570 / 8140 compliant (Security+ CE or higher – IAT Level II)
  • 5+ years of hands-on experience implementing and administering SailPoint (IdentityNow or IdentityIQ) in an enterprise environment
  • Strong understanding of identity lifecycle management (Joiner-Mover-Leaver automation)
  • Experience integrating SailPoint with Active Directory, LDAP, and Microsoft Entra ID
  • Experience implementing access governance concepts, including RBAC, separation of duties (SoD), and access certification
  • Ability to operate independently in complex, mission-critical environments
  • Labor Category Alignment: Journeyman: 3–10 years of experience
  • BA/BS or MA/MS
  • Senior: 10+ years of experience
Job Responsibility
Job Responsibility
  • Design, deploy, and maintain SailPoint IdentityNow or IdentityIQ to automate Joiner-Mover-Leaver (JML) identity lifecycle processes
  • Define and manage identity attributes (e.g., clearance, role, COI, project codes) used to support attribute-based access control (ABAC) models
  • Configure and execute automated access certification campaigns for privileged roles and critical systems
  • Develop and maintain SailPoint role models, including technical and business roles, to replace static group-based access
  • Support identity governance operations across disconnected and air-gapped environments, including Top Secret networks
  • Ensure identity data integrity and synchronization between low-side and high-side environments
  • Collaborate with ICAM, Zero Trust, and integration teams to ensure identity attributes are consumed correctly by downstream enforcement tools
  • Support audit and compliance requirements related to access governance and identity lifecycle management
Read More
Arrow Right

Senior Solutions Engineer Identity - East

Location
Location
United States , New York
Salary
Salary:
198000.00 - 273000.00 USD / Year
paloaltonetworks.com Logo
Palo Alto Networks
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • A passion for working with customers and a deep belief in problem solving as a team sport
  • Advanced knowledge (3-5 years) of Identity & Access Management, Identity Governance and Administration and/or Endpoint Security related technology – i.e., MFA/SSO, IDP/Directory Services/Federation, OAuth, OIDC, Identity lifecycle management, No-Code/Low-Code automation, Least Privilege principles, and other related topics
  • Knowledge of Identity & Access Management vendors and products
  • ability to compare with CyberArk products
  • An emphasis on (IAM/IGA) vendors and technologies in use across large enterprises for both on-premises and cloud is preferred
  • Exposure to and or administering identity platforms/directories like CyberArk, Active Directory, LDAP, SailPoint, Saviynt, Okta, or Microsoft Entra ID
  • An understanding of security concepts and the development of security roles within organizations that meet functional, technical, and regulatory requirements
  • Proficiency with REST APIs and use of API testing tools like Postman or Bruno
  • Deep understanding of IAM Compliance, Governance, Lifecycle and Workflows best practices
  • Excellent communication skills, with a strong drive to teach, document, and enable others
Job Responsibility
Job Responsibility
  • Act as a Subject Matter Expert (SME) to support both our Workforce IAM and IGA initiatives across the Central US region
  • Work directly with customers and prospects to understand their business goals and design secure, scalable identity solutions that meet them
  • Lead engaging product demonstrations, run workshops, guide evaluations, and partner with Sales Specialists to drive opportunities from discovery through technical close
  • Play a proactive role in the field beyond deal cycles—supporting marketing efforts that generate new pipeline, contributing to technical content like demos and videos, and offering real-world feedback to Product teams to make our solutions better
  • Clearly explain technical capabilities, identify integration paths, and troubleshoot challenges
  • Fulltime
Read More
Arrow Right

Senior Solutions Engineer Identity - East

CyberArk is looking for a customer-obsessed, technically curious Solutions Engin...
Location
Location
United States , New York
Salary
Salary:
198000.00 - 273000.00 USD / Year
paloaltonetworks.it Logo
Palo Alto Networks Italia
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • A passion for working with customers and a deep belief in problem solving as a team sport
  • Advanced knowledge (3-5 years) of Identity & Access Management, Identity Governance and Administration and/or Endpoint Security related technology – i.e., MFA/SSO, IDP/Directory Services/Federation, OAuth, OIDC, Identity lifecycle management, No-Code/Low-Code automation, Least Privilege principles, and other related topics
  • Knowledge of Identity & Access Management vendors and products
  • ability to compare with CyberArk products
  • An emphasis on (IAM/IGA) vendors and technologies in use across large enterprises for both on-premises and cloud is preferred
  • Exposure to and or administering identity platforms/directories like CyberArk, Active Directory, LDAP, SailPoint, Saviynt, Okta, or Microsoft Entra ID
  • An understanding of security concepts and the development of security roles within organizations that meet functional, technical, and regulatory requirements
  • Proficiency with REST APIs and use of API testing tools like Postman or Bruno
  • Deep understanding of IAM Compliance, Governance, Lifecycle and Workflows best practices
  • Excellent communication skills, with a strong drive to teach, document, and enable others
Job Responsibility
Job Responsibility
  • Act as a Subject Matter Expert (SME) to support both our Workforce IAM and IGA initiatives across the Central US region
  • Work directly with customers and prospects to understand their business goals and design secure, scalable identity solutions
  • Lead engaging product demonstrations, run workshops, guide evaluations, and partner with Sales Specialists to drive opportunities from discovery through technical close
  • Support marketing efforts that generate new pipeline
  • Contribute to technical content like demos and videos
  • Offer real-world feedback to Product teams to make our solutions better
  • Fulltime
Read More
Arrow Right

Senior Security Engineer - IAM

As a Senior Security Engineer, you will be responsible for the design and develo...
Location
Location
India , Bangalore
Salary
Salary:
Not provided
uber.com Logo
Uber
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 7+ Years of experience in development, Design and consulting for developing, designing SailPoint IIQ or similar IGA solutions, and Authentication platforms at large organizations
  • Experience with developing complex software systems scaling to millions of users with production quality deployment, monitoring, and reliability
  • Experience with large-scale distributed storage and database systems (SQL e.g. MySQL)
  • Ability to decompose complex business problems and help lead multiple teams in solving them
  • Understand Role-Based Access Control, Policy-Based Access Control, Attribute based access control, Governance, Access Certification in SailPoint
  • Experience in Web and Middleware technologies such as Nginx, Tomcat, Weblogic
  • Skill set in traffic management, Service and Session Load balancing skills primarily on HAProxy, NLB and F5 are added benefits
  • Leveraged tools like Cursor, GitHub Copilots to improve developer productivity
Job Responsibility
Job Responsibility
  • Design and development of Identity and Access Governance systems and microservices responsible for authentication, authorization, and single sign-on app integrations
  • Build new Features, APIs, Rules, Workflows, Analytics, Tasks and Reports for the Information Security org
  • Providing and assisting in defining Identity Security controls, best practices, compliance controls for Uber’s internal workforce and services
  • Identification and adoption of security trends, software engineering best practices defined by Uber engineering
  • Design and Build extensible access governance features, centralized and adaptive access management system, and Risk Models for the organization
  • Provide technical leadership in designing, implementing, testing, and rolling out the Identity platform (e.g. SailPoint IIQ, Cloud Identity, LDAP, MFA, SSO, etc.) at Uber
  • Practice Software engineering best practices while writing or reviewing code
  • Develop high quality engineering design documents for new integrations and initiatives
  • Engineer, Configure, Implement and maintain Identity and Access Management solutions and services
  • Resolve bugs through strong programming, critical problem solving, database query skills
Read More
Arrow Right

Senior Security Engineer

Raymond James Information Security is looking for a Senior Security Engineer to ...
Location
Location
United States , Saint Petersburg
Salary
Salary:
Not provided
raymondjames.com Logo
Raymond James
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Minimum 6 - 10 years working experience with Active Directory, Entra ID, AWS, and DNS / DHCP / IPAM
  • Proven hands-on experience with IAM (Hybrid & Cloud environments), AWS and related tools/technologies
  • Proven hands-on experience with networking solutions such as DNS / DHCP / IPAM
  • Strong and proven scripting and automation skills using PowerShell, etc.
  • Enterprise level experience is required - Financial Services experience is preferred
  • Additional skills - Event/log analysis and troubleshooting
  • System monitoring and event analysis
  • Bachelor’s: Computer and Information Science (Required)
  • General Experience - 6 to 10 years
  • Strong communication and collaboration skills are required, with the ability to work independently and as part of a team
Job Responsibility
Job Responsibility
  • Support and maintain Active Directory
  • Entra ID and DNS/DHCP/IPAM system-based processes
  • Assist in defining and implementing AD
  • Entra ID and DNS/DHCP/IPAM support procedures
  • Work on Operational Engineering Tasks – Tickets
  • Incidents
  • Change Requests
  • Vulnerabilities
  • Maintenance Tasks
  • Provide technical input on IAM technologies, policies, and compliance requirements
  • Fulltime
Read More
Arrow Right

Senior Cyber Security Engineer II-Identity Governance

The Sr. Cyber Security Engineer II – Identity Governance is a pivotal role respo...
Location
Location
United States , Framingham
Salary
Salary:
139000.00 - 191000.00 USD / Year
staplespromo.com Logo
Staples Promotional Products
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Cybersecurity, Computer Science, or a related field or equivalent work experience
  • 10 or more years of progressively complex experience in cybersecurity
  • Proven experience with cybersecurity frameworks (e.g., NIST, ISO 27001)
  • Hands-on experience with security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, and content filtering
  • Knowledge of network protocols and data encryption methods
  • Hands-on experience supporting Active Directory in an enterprise environment
  • Practical experience with identity and access management concepts including: user lifecycle provisioning, entitlement management, role-based access control (RBAC)
  • Experience building or supporting application integrations with an IGA platform
  • Experience supporting SSO and authentication integrations
  • Working knowledge of conditional access and modern authentication controls
Job Responsibility
Job Responsibility
  • Engineer, maintain, and secure Active Directory components including domains, OUs, group structures, service accounts, and delegated administration models
  • Support hybrid identity patterns integrating on‑premises Active Directory with cloud identity platforms
  • Partner with infrastructure and cloud teams to ensure directory services are resilient, monitored, and aligned to security best practices
  • Apply Zero Trust security concepts to identity systems, recognizing Active Directory and identity connectors as high‑risk control plane assets
  • Support privileged access separation, administrative role scoping, and least‑privilege enforcement across identity platforms
  • Participate in hardening initiatives to reduce privilege escalation paths and credential exposure within identity services
  • Implement and support SSO and federation integrations using industry‑standard protocols (SAML, OIDC, OAuth)
  • Assist in designing and maintaining conditional access policies based on user risk, role, device posture, and authentication context
  • Troubleshoot authentication and authorization issues across directories, identity providers, and integrated applications
  • Support joiner / mover / leaver lifecycle processes across Active Directory and downstream applications
What we offer
What we offer
  • Competitive base salary + bonus on eligible positions
  • 22 days plus 7 major holidays and 1 floating holiday
  • Company match 401(k) plan
  • Online and retail discounts
  • Physical and mental health wellness programs
  • Daycare, cafeteria, fitness center, and coffee shop at our HQ
  • Inclusive culture with associate-led Business Resource Groups
  • Fulltime
Read More
Arrow Right

Senior Corporate Security Engineer

At Crusoe, the Corporate Security Engineer is essential for safeguarding our emp...
Location
Location
United States , San Francisco; Sunnyvale
Salary
Salary:
130000.00 - 170000.00 USD / Year
crusoe.ai Logo
Crusoe
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 6-8+ years of hands-on experience in a Corporate Security, Enterprise Security, or similar role
  • Proven experience designing, implementing, and managing security technologies at scale, including: MDM solutions (e.g., Intune, Kandji, Jamf, etc.), IAM solutions (e.g., Okta, Azure AD, IGA applications, etc. including SSO, MFA, PAM concepts), Endpoint security tools (EDR/XDR), Email threat protection solutions, DLP and/or SSPM solutions
  • Strong understanding of modern security principles, including Zero Trust architecture, "secure by design," and defense-in-depth
  • Experience with securing SaaS applications and enforcing security policies
  • Demonstrated experience in security incident response, including triage, investigation, and remediation
  • Familiarity with scripting languages (e.g., Python, PowerShell) for automation and integration
  • Excellent problem-solving, analytical, and critical-thinking skills
  • Strong communication and collaboration skills, with the ability to work effectively across different teams
  • Embody the Company values
Job Responsibility
Job Responsibility
  • MDM Administration & Endpoint Security: Implementing, administering, and optimizing Mobile Device Management (MDM) solutions and enforcing security policies across diverse endpoints (laptops, mobile devices)
  • Hardware & Software Security Standards: Establishing and maintaining hardware/software security standards and ensuring the strong security posture of corporate devices
  • Identity & Access Management (IAM): Designing, implementing, and managing core Identity & Access Management (IAM) technologies, including SSO, MFA, PAM, and identity lifecycle solutions, contributing to our Zero Trust architecture
  • Data Protection & Email Security: Implementing, configuring, and tuning Data Loss Prevention (DLP), SaaS Security Posture Management (SSPM), and email security solutions to protect against various threats
  • Secure Architecture & Technology Evaluation: Designing secure corporate environments using "secure by design" principles and evaluating the security posture of new technologies, vendors, and applications
  • Security Operations & Incident Response: Actively participating in corporate security operations, including monitoring security alerts, detecting, triaging, investigating, and responding effectively to security incidents
  • Security Consulting & Best Practices: Consulting with and advising IT, Engineering, and other teams on secure architecture, IAM best practices, and secure configurations
What we offer
What we offer
  • Restricted Stock Units in a fast growing, well-funded technology company
  • Health insurance package options that include HDHP and PPO, vision, and dental for you and your dependents
  • Employer contributions to HSA accounts
  • Paid Parental Leave
  • Paid life insurance, short-term and long-term disability
  • Teladoc
  • 401(k) with a 100% match up to 4% of salary
  • Generous paid time off and holiday schedule
  • Cell phone reimbursement
  • Tuition reimbursement
  • Fulltime
Read More
Arrow Right