Sr IAM Security Engineer

Job Description: **Applicants must be authorized to work in the U.S.; Sponsorship is not available for this position.
** This role can be Remote, Hybrid or Onsite
We are looking for a
Senior IAM Security Engineer
 to own, operate, and continuously improve our Saviynt-based Identity Governance and Administration (IGA) platform. This role is ideal for an engineer who enjoys solving complex identity challenges, leading production support efforts, designing scalable integrations, and improving identity governance capabilities across the enterprise.
You will serve as the
primary technical owner of our Saviynt implementation
, ensuring reliable identity lifecycle management, access governance, and integration with enterprise systems including Oracle, Active Directory, Entra ID, and other critical business applications. This role balances hands-on engineering, operational ownership, governance maturity, and technical leadership.
Our IAM program is continuing to mature and expand. This role will play a critical part in improving platform reliability, reducing manual effort, strengthening governance controls, and enabling future identity initiatives and broader enterprise security capabilities.

Core Responsibilities: Operate and Own IAM Services (Primary)
Own day-to-day operation, support, and reliability of the Saviynt platform
Troubleshoot and resolve provisioning, deprovisioning, reconciliation, and identity lifecycle failures across Oracle, Active Directory, Entra ID, and integrated applications
Serve as the primary escalation point for IAM operational incidents and complex access issues
Perform root cause analysis and implement long-term corrective actions to prevent recurring issues
Monitor platform health, job execution, provisioning success rates, and service performance
Develop and maintain operational runbooks, support documentation, and knowledge articles
Participate in production support processes, change control, peer reviews, and CAB activities
Engineer IAM Integrations and Platform Capabilities
Design, build, enhance, and support Saviynt connectors, workflows, rules, policies, analytics, and certifications
Develop and maintain integrations utilizing REST APIs, SOAP services, JDBC connections, and other enterprise integration methods
Partner with application teams to onboard new applications and automate identity lifecycle processes
Support Oracle Cloud, Oracle ERP, Active Directory, Entra ID, and other enterprise identity integrations
Lead testing, validation, deployment, and upgrade activities for IAM platform enhancements
Ensure IAM solutions are scalable, maintainable, and aligned with enterprise security requirements
Advance Identity Governance Capabilities
Support and improve Joiner, Mover, Leaver (JML) lifecycle processes
Implement and maintain access request workflows, approval processes, and entitlement management
Design, execute, and improve access certification campaigns and remediation activities
Contribute to role-based and attribute-based access models (RBAC/ABAC)
Support Segregation of Duties (SoD) controls, governance policies, and audit requirements
Assist with identity correlation, reconciliation, entitlement cleanup, and governance optimization efforts
Reduce Toil and Improve the Platform
Identify manual processes and develop automation solutions to improve efficiency and reliability
Improve platform observability, monitoring, reporting, and operational metrics
Develop dashboards and reporting that provide insight into platform health and governance effectiveness
Improve testing practices, deployment processes, and operational maturity
Drive continuous improvement initiatives focused on scalability, reliability, and user experience
Provide Technical Leadership and Ownership
Serve as the technical lead for IAM engagements involving application teams and business stakeholders
Guide technical design discussions and recommend IAM best practices
Conduct peer reviews and contribute to engineering standards and reusable implementation patterns
Mentor junior engineers and share knowledge across the IAM team
Communicate technical concepts, risks, and recommendations clearly to both technical and non-technical audiences
Balance security, operational stability, business requirements, and delivery timelines pragmatically
Collaborate Across Security Domains
Partner with Infrastructure, Security Operations, Cloud, and Application teams to deliver integrated identity solutions
Support identity-related security incidents and remediation activities when required
Contribute to IAM strategy, roadmap discussions, and future platform enhancements
Assist with evaluation and adoption of new IAM technologies and capabilities

Required Qualifications
5+ years of hands-on experience
 in Identity and Access Management, Information Security, Platform Engineering, or related technical disciplines
3+ years of experience delivering Identity Governance and Administration (IGA) capabilities
Experience administering and supporting enterprise IAM platforms such as Saviynt, SailPoint, Okta, EmpowerID, or similar technologies
Strong troubleshooting and root cause analysis skills in complex production environments
Experience with identity lifecycle management, access provisioning, deprovisioning, and governance processes
Experience developing or supporting integrations utilizing REST APIs, SOAP services, JDBC connections, or similar technologies
Working knowledge of Active Directory, Entra ID, and enterprise authentication and authorization concepts
Experience with scripting or development technologies such as JavaScript, PowerShell, Python, Java, or similar languages
Experience working within change control, peer review, and production support processes
Strong written and verbal communication skills
Ability to work independently while effectively collaborating with cross-functional teams

Preferred Qualifications
Hands-on experience with
Saviynt Enterprise Identity Cloud (EIC)
Experience integrating IAM platforms with Oracle Cloud, Oracle ERP, Oracle EBS, SAP, or similar enterprise systems
Experience with access certifications, role engineering, entitlement management, and Segregation of Duties controls
Experience with SAML, OAuth, OpenID Connect (OIDC), MFA, and Single Sign-On technologies
Experience supporting or integrating with Privileged Access Management (PAM) platforms such as Delinea, CyberArk, BeyondTrust, or similar solutions
Experience automating operational processes and improving platform observability
Familiarity with cloud identity and hybrid identity architectures
Security certifications such as CISSP, CISM, Security+, SSCP, or related credentials
Saviynt certifications or formal Saviynt implementation experience

What This Role Is
A senior hands-on engineering role with ownership of a critical enterprise IAM platform
A position responsible for balancing operational excellence, governance maturity, and engineering improvements
A role that influences IAM architecture and strategy while remaining deeply involved in technical implementation
A key contributor to the growth and maturity of Milwaukee Tool's IAM capabilities

What This Role Is Not
Not a pure IAM architect position
Not a policy-only or compliance-only role
Not a ticket-processing role without engineering responsibilities
Not a position that avoids operational ownership
Not a role requiring direction for every task or decision
We provide these great perks and benefits:

Robust health, dental and vision insurance plans
Generous 401 (K) savings plan
Education assistance
On-site wellness, fitness center, food, and coffee service
And many more, check out our benefits site
HERE
.
Milwaukee Tool is an equal opportunity employer.