{"id":909800,"url":"https://alion.io/job/stryker-principal-engineer-cybersecurity-iga","title":"Principal Engineer, Cybersecurity, IGA","company":{"id":2579,"name":"Stryker","domain":"stryker.com","url":"https://alion.io/company/stryker","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":138,"ghost_share":0.014,"stale_share":0.609,"repost_share":0.029,"time_to_fill_p50_days":34,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kalamazoo, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":135600,"max":225900,"currency":"USD","period":"year","gross":null,"usd_annual":225900},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Rest API","optional":false}],"status":"live","first_seen_at":"2026-09-14T15:45:17Z","employer_posted_date":"2026-09-14","last_verified_at":"2026-11-04T05:56:18Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":50},"description":"Work Flexibility: RemoteAs an IGA Principal Engineer, you will build and operateenterprise identity governance, authentication, and authorization services that protect access across the organization. You will partner with senior business, application, and infrastructure stakeholders to translate requirements into scalable identity architecture, standards, and controls.\nWHAT YOU WILL DO\nTechnical Responsibilities:\nBuild, configure, and operateenterprise IGA platforms, including SailPoint, Saviynt, or Microsoft Entra ID Governance, with supporting directory and authentication services.\n\nEngineer identity lifecycle workflows for joiners, movers, and leavers, including automated provisioning and deprovisioning.\n\nImplement and maintainaccess requests, approval workflows, access certificationand recertification campaigns, RBAC models, role mining, and segregation-of-duties rules.\n\nConfigure authoritative sources, identity reconciliation, and identity data quality remediation.\n\nImplement SSO, MFA, federation, and risk-based authentication using SAML, OAuth, OpenID Connect, and SCIM.\n\nDevelop PowerShell, Microsoft Graph, REST API, and SCIM automations and integrations to onboard applications to IGA services.\n\nProduce identity reporting, integration governance, and audit evidence for access-related controls.\n\nTroubleshoot IGA, provisioning, and directory issues; maintaindocumentation; and execute IAM controls supporting SOX, HIPAA, ISO 27001, and NIST CSF compliance.\n\nKnowledge and Capabilities:\nGather requirements from senior business, application, and infrastructure stakeholders and provide scope and architecture consultation.\n\nDefine, communicate, and embedenterprise identity governance standards, patterns, and controls with senior stakeholders.\n\nAnalyze complex identity issues, communicate technical concepts clearly, and maintainprecise configuration and governance practices.\n\nWHAT YOU NEED\nRequired Qualifications\nBachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline, or equivalent practical experience.\n\nMinimum 8 years of experience in IT or cybersecurity.\n\nMinimum 5 years of hands-on experienceengineering and operating IGA or IAM environments.\n\nExperience with SailPoint, Saviynt, or Microsoft Entra ID Governance, plus Active Directory and Microsoft Entra ID.\n\nExperience with identity lifecycle management, provisioning and deprovisioning, access certification, RBAC, and segregation-of-duties enforcement.\n\nWorking knowledge of SAML, OAuth, OpenID Connect, and SCIM.\n\nExperience with PowerShell, Microsoft Graph, or REST APIs.\n\nPreferred Qualifications\nSailPoint IdentityIQor IdentityNowEngineer, Saviynt, Microsoft Certified: Identity and Access Administrator Associate (SC-300), or CISSP certification.\n\nUnited States of America Pay Ranges:\nUSN: $135,600 - $225,900 USD Annual\nUS5: $142,400 - $237,200 USD Annual\nUS10: $149,200 - $248,500 USD Annual\nUS15: $155,900 - $259,800 USD Annual\nUS20: $162,700 - $271,100 USD Annual\nUS30: $176,300 - $293,700 USD Annual\nView the U.S. work location and transparency guide to find the pay range for your location.Travel Percentage: NoneStryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer - M/F/Veteran/Disability.Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.","description_format":"text","description_chars":4268,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Surgical Instruments & Devices","Hospital Equipment & Furniture"],"lifecycle":[{"event":"open","at":"2026-09-14T15:45:17Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 73 · green card filings: 27","filings_12m":73,"filings_prev_12m":92,"green_card_filings_12m":27,"median_offered_wage_usd":133850,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.546,"p_room":0.44,"age_days":50,"expected_fill_days":34,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":225900,"is_top_pay":true},"html_url":"https://alion.io/job/stryker-principal-engineer-cybersecurity-iga","json_url":"https://alion.io/job/stryker-principal-engineer-cybersecurity-iga.json","meta":{"generated_at":"2026-11-04T07:32:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11762,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2579},"rest":"https://alion.io/mcp/rest/get_company?id=2579"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstryker-principal-engineer-cybersecurity-iga"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstryker-principal-engineer-cybersecurity-iga"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstryker-principal-engineer-cybersecurity-iga"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stryker-principal-engineer-cybersecurity-iga\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstryker-principal-engineer-cybersecurity-iga"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":909800}},{"tool":"search_jobs","arguments":{"company":"stryker.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":909800},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}