Sr. IGA Engineer - SailPoint

Job Description

As a Senior IAM Engineer, contribute during phases of design, configuration, deployments, and operations in the area of Identity and Access Management (IAM). This includes Access Management (IAM), Identity Governance (IGA) and Identity Management solutions. The role requires hands on experience in a fast paced environment, working with business and internal customers to develop and deploy complex solutions in Saviynt. Expectations also include deep debugging and issue triaging skills to mitigate risks, automation, resolve issues and deliver modern access management solutions.

Position Description

• Will be responsible for following the standards of McKesson for Identity, Access Management, and related environments.
• Performs hands on development for onboarding new applications to Sailpoint and provides operational support for implemented solutions.
• Ownership of custom developed applications.
• Deliver modern access management integrations for B2B, B2C and B2E customers.
• Provide expert advice and assistance relating to all aspects of identity to broader IT, BU and international teams, while communicating concepts of IAM to a broad range of audiences inside and outside of the team.
• Develop technical design documents as needed for integration with an IGA platform and other IAM services.
• Collaborate closely with the various global security teams, IT teams, BU stakeholders and application teams to insure IAM tools, configurations and industry best practices are implemented uniformly across the enterprise.
• Create and maintain technical documentation such as SOPs, design documents, operational drawings, manuals, etc.
• Maintain an understanding of key business unit initiatives to provide effective identity services, solutions and guidance.

Qualifications

• 7+ years of relative experience.
• 4 year degree in computer science or related field or equivalent experience.

Minimum Requirements

• Hands on experience developing/configuring access management solution using Sailpoint.
• Experience in integrating, developing or administering IAM security solutions in a large organization.
• Experience integrating user account management across industry standard OS platforms.
• Strong development experience using modern development languages (preferably Java/J2EE, PowerShell, JavaScript, etc.).
• Experience in analysis and design work, with the ability to develop and communicate architectural concepts, end state vision and technology roadmaps.
• Advanced knowledge of Active Directory, Azure AD, LDAP or other directory systems.
• Knowledge of federation and SSO technologies such as SAML, OpenID Connect, OAuth, ADFS, or multifactor authentication.
• Experience with web services, SCIM, ODBC and other supported connectors.
• Experience with Flask 3.0.3.
• Experience with Werkzeug 3.0.4.
• Experience with Jinja2 3.1.4.
• Experience with Python.
• Experience with PyJWT.
• Experience with Pymssql.
• Experience with Azure Keyvault.

Preferred Skills

• Advanced experience with automating user provisioning and reporting using industry standard platforms and programming languages (PowerShell, Python, Ansible, Terraform, etc.).
• Advanced experience or knowledge of IAM principals and best practices.
• Understanding of authentication and authorization tokens (SAML assertions, OAuth claims, grants and scopes, etc.).
• Technical experience in Okta Classic and Okta Identity Engine, IdP, AD, LDAP, Saviynt, RSA, Single Sign On, OAuth, SAML, DNS, GCP and Azure.
• Understanding of one or more control frameworks such as NIST, HIPAA HITECH, SSAE 16, PCI, HITRUST, ISO 27001, etc.; solid understanding of SOX, SOC and related regulations including GDPR.
• Experience with relational databases such as MySQL, Oracle, Microsoft SQL Server.
• Familiarity with healthcare, privacy or financial compliance regulations and IT and security frameworks and standards.
• OSCP, SANS/GIAC, CISSP or similar professional certifications is a plus.

Base Pay Range for this position: €70,500 - €117,500