IAM Saviynt Security Architect
Eshwar SUnited StatesMIDPosted 14d ago
SaviyntGCP IAMDelineaIdentity lifecycleAccess governanceRBACLeast privilegeCertificationsSoDAPIConnectorWorkflowData-modelCloud security architecture
About the Role
We are seeking an IAM Saviynt Security Architect to lead current-state assessment and architecture discovery workshops across GCP, Saviynt, Delinea, and connected enterprise systems. This role focuses on defining target-state architecture for identity lifecycle governance and designing integration patterns for various systems.
Key Responsibilities
• Lead current-state assessment and architecture discovery workshops across GCP, Saviynt, Delinea, and connected enterprise systems.
• Define target-state architecture for human and non-human identity lifecycle governance, service account governance, access certifications, and credential controls.
• Design integration patterns for Saviynt, GCP IAM, Delinea, authoritative sources, ticketing or approval systems, and downstream applications.
• Define entitlement, ownership, role, service account, NHI taxonomy, and lifecycle models aligned with least privilege and auditability.
• Create solution design documents, architecture diagrams, data flows, interface specifications, security controls, and non-functional requirements.
• Provide design oversight for time-bound group membership, custom GCP role lifecycle, access reviews, and privileged credential governance.
• Review configurations and customizations for scalability, maintainability, security, and alignment with product best practices.
• Facilitate architecture reviews, document decisions and risks, and support customer security, audit, and compliance approvals.
• Guide SIT, security validation, UAT support, production readiness, rollback planning, post-go-live validation, and knowledge transfer.
• Mentor engineering teams and resolve complex cross-platform technical issues.
Requirements
• Saviynt Enterprise Identity Cloud or equivalent IGA architecture
• GCP IAM, projects, folders, groups, roles, service accounts, and IAM bindings
• Delinea or comparable PAM and credential-vaulting platforms
• Identity lifecycle, access governance, RBAC, least privilege, certifications, and SoD concepts
• API, connector, workflow, data-model, and cloud security architecture
• Architecture documentation, stakeholder workshops, risk management, and design governance
Education and Experience
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline.
• Typically 10+ years in IAM or Security engineering, including 3+ years in solution architecture or technical leadership.
• Relevant Saviynt, GCP, Security, or PAM certifications.