{"id":1629114,"url":"https://alion.io/job/ralliant-identity-automation-engineer","title":"Identity Automation Engineer","company":{"id":2241821,"name":"Ralliant","domain":"ralliant.com","url":"https://alion.io/company/ralliant","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":89,"open_postings":17,"ghost_share":0,"stale_share":0.235,"repost_share":0,"time_to_fill_p50_days":65,"computed_at":"2026-10-14T06:34:16Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":22000,"max_usd":51000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":768},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-30T04:20:00Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-14T04:53:06Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"Role Description\nThe Identity Governance Administration Automation Engineer is responsible for administering, automating, and continuously improving the enterprise's Identity Governance and Administration (IGA) environment, with a focus on Saviynt. This role ensures that access certification, provisioning, and entitlement management processes are secure, auditable, and efficient across the enterprise and its Operating Companies (OpCos).\nThis role acts as both a platform administrator and an automation engineer, building and maintaining workflows that connect Saviynt to enterprise identity sources, target applications, and downstream systems. The engineer partners closely with Security, Infrastructure, Application, and Audit teams to ensure identity lifecycle events - joiner, mover, leaver, and access certification - are governed, automated, and evidenced consistently across on-premises, cloud, and hybrid environments.\nThe role is hands-on and execution-focused while embracing the Ralliant Business System (RBS) by embedding operational discipline, staff training, and continuous improvement into tools, workflows, and standard work so endpoint management is scalable, measurable, and repeatable. The role operates in service to the enterprise and operating companies, ensuring standardized identity governance practices while adapting to regional and business-specific needs.\nKey Responsibilities\nAdminister and support the Saviynt Identity Governance and Administration (IGA) platform, including application onboarding, connector configuration, and control library management.\n\nDesign, build, and maintain automated identity lifecycle workflows (joiner, mover, leaver) across Active Directory, cloud directories, and business applications.\n\nConfigure and enforce access certification campaigns, segregation of duties (SoD) controls, and role-based access (RBAC) policies to manage least-privilege access at scale.\n\nDevelop and maintain Saviynt connectors and integrations using REST APIs, SCIM, and native connector frameworks to onboard new applications and OpCo environments.\n\nDevelop PowerShell, Python, and REST API scripts and workflows to automate provisioning, deprovisioning, and entitlement reconciliation tasks.\n\nTroubleshoot and resolve provisioning, reconciliation, and workflow failures, including connector errors, data mismatches, and approval routing issues.\n\nSupport authentication and authorization integrations across Active Directory/LDAP, SAML, OAuth 2.0, multi-factor authentication (MFA), and Single Sign-On (SSO) to ensure accurate identity data flows into governance processes.\n\nMonitor and analyze Saviynt, system, and integration logs, supporting SIEM integration, performance monitoring, and incident response for governance-related events.\n\nApply identity governance best practices and support compliance with frameworks such as SOX, PCI-DSS, NIST, and ISO 27001, including audit evidence generation and reporting.\n\nPartner with Security, Infrastructure, Application, and Audit teams to integrate identity governance solutions across enterprise and OpCo environments.\n\nDocument procedures, configurations, and control workflows, and train end users and control owners on certification and access request processes.\n\nContinuously improve governance workflows and dashboards, applying RBS principles to drive measurable reductions in manual effort and audit findings.\n\nQualifications\nBachelor's degree recommended; equivalent experience considered.\n\n10+ years of experience in identity governance, identity and access management, or systems administration, with 5+ years hands-on experience with Saviynt (Saviynt Enterprise Identity Cloud or Saviynt IGA) or relevant experience.\n\nStrong understanding of identity governance architecture, including access certification, role mining, SoD controls, and entitlement management.\n\nProficiency in REST APIs, SCIM, and connector development for onboarding applications into an IGA platform, across on-premises and cloud environments (AWS, Azure, GCP).\n\nExperience with Active Directory/LDAP, SAML, OAuth 2.0, MFA, and SSO as identity sources feeding governance and provisioning workflows.\n\nScripting experience in PowerShell and Python, with working knowledge of REST APIs and Saviynt SDKs/APIs.\n\nWorking knowledge of JSON, including reading, structuring, and troubleshooting JSON payloads for connector configurations, API requests, and workflow integrations.\n\nExperience with log analysis and SIEM integration, incident response, and root cause analysis for governance and provisioning issues.\n\nKnowledge of compliance frameworks (SOX, PCI-DSS, NIST, ISO 27001) and zero trust security principles.\n\nSaviynt certification preferred; cloud platform or security certifications (AWS, Azure, GCP, CISSP, CISM, Security+) a plus.\n\nStrong communication and documentation skills, with the ability to explain technical concepts to non-technical stakeholders, control owners, and auditors.\n\nAbility to operate effectively across enterprise and OpCo environments, balancing global consistency with local context across multiple time zones and culture.\n\nAlignment with Ralliant values and the Ralliant Business System (RBS), including continuous improvement, transparency, and ownership.","description_format":"text","description_chars":5263,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-01T21:16:28Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":14,"expected_fill_days":65,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/ralliant-identity-automation-engineer","json_url":"https://alion.io/job/ralliant-identity-automation-engineer.json","meta":{"generated_at":"2026-10-14T06:52:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8211,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2241821},"rest":"https://alion.io/mcp/rest/get_company?id=2241821"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fralliant-identity-automation-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fralliant-identity-automation-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fralliant-identity-automation-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ralliant-identity-automation-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fralliant-identity-automation-engineer"}]}