{"id":132360,"url":"https://alion.io/job/frbservices-saviynt-iam-engineer","title":"Saviynt IAM Engineer","company":{"id":1757343,"name":"Federal Reserve Financial Services","domain":"frbservices.org","url":"https://alion.io/company/frbservices","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":16,"ghost_share":0.063,"stale_share":0.625,"repost_share":0.188,"time_to_fill_p50_days":28,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States","Saint Louis, United States","Cleveland, United States","Chicago, United States","New York, United States","Kansas City, United States","Boston, United States","Atlanta, United States","Minneapolis, United States","Dallas, United States","Charlotte, United States","Richmond, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Rest API","optional":false},{"name":"SQL","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"HIPAA","optional":true},{"name":"Java","optional":true},{"name":"PCI DSS","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-08-26T00:00:00Z","employer_posted_date":"2026-09-11","last_verified_at":"2026-10-27T03:54:49Z","board_verified":true,"closed_at":null,"days_open":63,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":63},"description":"Company\nFederal Reserve Bank of RichmondWhen you join the Federal Reserve-the nation's central bank-you’ll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems. We invest in contemporary and emerging technology each year to support the Federal Reserve and our economy, and we’re building a dynamic and diverse team for our future.The Senior IGA Engineer is responsible for designing, developing, integrating, testing, deploying, and supporting enterprise Identity Governance & Administration capabilities, with primary emphasis on Saviynt EIC. The role requires strong hands-on development skills across identity lifecycle management, access requests, provisioning, certifications, role/access modeling, application onboarding, APIs, connectors, workflows, and production troubleshooting. The engineer will translate security and business requirements into scalable, supportable IGA solutions across SaaS, cloud, and enterprise applications. \nEssential Responsibilities:\nDesign, configure, develop, test, deploy, and maintain Saviynt EIC solutions supporting enterprise IGA use cases. \nBuild and enhance Joiner/Mover/Leaver (JML) lifecycle processes, birthright access, automated provisioning/deprovisioning, and termination controls. \nConfigure and develop access request workflows, approval chains, entitlement governance, access policies, roles, user manager structures, and delegated administration. \nDevelop and maintain access certification campaigns, reviewer logic, escalation paths, remediation workflows, and certification reporting. \nOnboard SaaS, cloud, database, directory, and enterprise applications using Saviynt connectors and custom integration patterns. \nDevelop integrations using REST APIs, SCIM, JDBC/SQL, web services, file-based feeds, scripting, and other supported integration methods. \nCreate and troubleshoot Saviynt workflows, rules, analytics, jobs, tasks, connection configurations, imports, provisioning actions, and technical controls. \nImplement and support RBAC, role engineering, entitlement structures, access policies, Segregation of Duties (SoD) controls, and least-privilege patterns. \nDiagnose complex identity data, provisioning, reconciliation, connector, API, workflow, and performance issues across non-production and production environments. \nCreate reusable engineering patterns, technical documentation, configuration standards, runbooks, test evidence, and deployment procedures. \nPartner with IAM architecture, cybersecurity, application owners, infrastructure, HR, audit, and engineering teams to deliver end-to-end identity solutions. \nParticipate in code/configuration reviews, release management, incident/problem management, root-cause analysis, and continuous platform improvement. \nMentor engineers and provide technical leadership on Saviynt implementation patterns, troubleshooting, and engineering quality. \nRequirements\nHands-on Saviynt EIC development and configuration experience delivering production IGA capabilities at enterprise scale.\nAbility to independently develop, configure, test, troubleshoot, and support Saviynt-not solely gather requirements, administer campaigns, or provide program governance. \nDemonstrated experience building Saviynt application integrations and resolving connector, API, data mapping, reconciliation, import, and provisioning issues. \nHands-on implementation of identity lifecycle automation, including JML events, account creation, access changes, deprovisioning, and termination processing. \nHands-on experience with access requests, approval workflows, certifications, entitlement governance, and provisioning workflows. \nStrong REST API, JSON, SQL, and integration troubleshooting skills. \nProduction support experience, including incident diagnosis, log analysis, root-cause analysis, defect remediation, and controlled releases. \nStrong understanding of IAM/IGA principles including least privilege, RBAC, SoD, access governance, authoritative sources, identity correlation, and lifecycle controls. \nQualifications\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Engineering, or a closely related technical discipline or equivalent relevant experience\n5+ years of professional experience in IAM, IGA, security engineering, application integration, or related identity engineering disciplines. \n2+ years of recent, hands-on Saviynt engineering/development experience, preferably with Saviynt EIC.\nExperience integrating heterogeneous applications, including SaaS applications, directories, databases, cloud platforms, and custom/internal systems. \nProficiency with RESTful APIs, JSON, SQL, data transformations, authentication methods, and API troubleshooting tools. \nExperience with SCIM and common identity integration patterns; familiarity with LDAP/Active Directory concepts is expected. \nExperience with source-of-truth / authoritative identity feeds such as HR systems and with identity correlation and data quality remediation. \nAbility to analyze complex technical problems across identity data, IGA platform configuration, target applications, and downstream provisioning components. \nExperience working through software/engineering lifecycle activities: requirements refinement, design, build, test, peer review, deployment, documentation, and production support. \nStrong written and verbal communication skills with the ability to work effectively across security, engineering, application, audit, and business teams. \nPreferred skills:\nCurrent Saviynt technical certification or formal Saviynt implementation training. \nExperience with major cloud platforms such as AWS, Microsoft Azure, or Google Cloud and their identity/security integration patterns. \nExperience integrating HR platforms such as Workday or other authoritative identity sources. \nExperience with Privileged Access Management (PAM), non-human/service identities, or machine identity governance. \nExperience with CI/CD, Infrastructure-as-Code, automated testing, or DevSecOps practices applied to IAM/IGA engineering. \nExperience with Java/Groovy/Python/PowerShell or comparable scripting/programming used for integrations and automation. \nExperience supporting regulatory or audit-driven access controls in environments subject to SOX, PCI DSS, HIPAA, financial-services, or similar requirements. \nExperience with enterprise role engineering, access modeling, entitlement rationalization, and SoD rule design. \nExperience leading complex application onboarding initiatives or mentoring IGA engineers. \nLocations:\nThe selected candidate will reside within a reasonable commuting distance, as defined by the employing Reserve Bank, and will work full-time onsite.\nEligible Locations for Hire: Boston, MA- New York, NY- Philadelphia, PA- Cleveland, OH- Richmond, VA- Atlanta, GA- Chicago, IL- St. Louis, MO- Minneapolis, MN- Kansas City, MO- Dallas, TX- San Francisco, CA\nThe following Reserve Bank locations are preferred due to the concentration of System IT team members in these locations: San Francisco, CA & Richmond, VA\nBase Salary Range: Min: $120,000 Mid: $155,800 Max: $191,700 (Location: San Francisco)\nThe listed salary is applicable to 12th District/San Francisco. Final offers are determined by factors including the candidate’s qualifications, internal alignment considerations, district assignment, and geographic location.\nSponsorship:\nIndividuals who need immigration sponsorship now or in the future are not eligible for this position.\nMust be a U.S Citizen or a Green card holder with intent to become a U.S Citizen.\nWe offer a wonderful benefits package including: Medical, Dental, Vision, Pre-tax Flexible Spending Account, Backup Child Care Program, Pre-Tax Day Care Flexible Spending Account, Paid Family Care Leave, Vacation Days, Sick Days, Paid Holidays, Pet Insurance, Matching 401(k), and Retirement/Pension.\nThe Bank is committed to providing reasonable accommodations to individuals with disabilities to participate in the job application or interview process, perform essential job functions and receive other benefits and privileges of employment. The SF Fed is an Equal Opportunity Employer. If you need any assistance or accommodations due to a disability, please let us know at .\nFull Time / Part Time\nFull timeRegular / Temporary\nRegularJob Exempt (Yes / No)\nYesJob Category\nInformation Technology Family GroupWork Shift\nFirst (United States of America)The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.\nAlways verify and apply to jobs on Federal Reserve System Careers (https://rb.wd5.myworkdayjobs.com/FRS) or through verified Federal Reserve Bank social media channels.\nPrivacy Notice","description_format":"text","description_chars":8925,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cleaning & Household Products","Personal Hygiene & Toiletries","OTC & Consumer Health Products","FMCG & Consumer Brand Groups"],"lifecycle":[{"event":"open","at":"2026-08-26T00:00:00Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.467,"p_room":0.28,"age_days":62,"expected_fill_days":28,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/frbservices-saviynt-iam-engineer","json_url":"https://alion.io/job/frbservices-saviynt-iam-engineer.json","meta":{"generated_at":"2026-10-28T01:25:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1817,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1757343},"rest":"https://alion.io/mcp/rest/get_company?id=1757343"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffrbservices-saviynt-iam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffrbservices-saviynt-iam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffrbservices-saviynt-iam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/frbservices-saviynt-iam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffrbservices-saviynt-iam-engineer"}]}