Manager, Identity and Access Management (IAM)

Location: Remote – United States (Eastern or Central Time Zone)
Schedule: Full-Time, Days, Monday-Friday
Compensation: $151,000–$200,000 annually, based on experience

Position Overview

Xerox is seeking an experienced Identity & Access Management Engineering Manager to provide technical leadership in the design, implementation, and continued evolution of our enterprise IAM capabilities.

In this role, you will lead a team of IAM Security Engineers while overseeing the successful execution of projects and delivery of high-quality security solutions. You will collaborate with business leaders, IT teams, cybersecurity professionals, engineers, and architects to build and deploy effective IAM technologies, processes, and controls across the enterprise.

The ideal candidate has extensive hands-on experience with Saviynt Identity Governance and Administration (IGA), strong technical development skills, and the ability to lead complex IAM initiatives in a large enterprise environment.

What You’ll Do

• Lead, mentor, and oversee a team of four Security Engineers specializing in Identity and Access Management.
• Engineer, develop, and maintain enterprise IAM solutions using Saviynt IGA and Delinea Secret Server Cloud, formerly Thycotic PAM.
• Develop new application integrations, account connectors, and entitlement connectors within the Saviynt platform.
• Design and develop Saviynt access-request forms based on business and operational requirements.
• Support the onboarding of new applications to the Saviynt IGA platform.
• Enhance access-review definitions and generate quarterly certification reviews to support audit requirements.
• Verify that user access and application entitlements align with each employee’s business role and job responsibilities.
• Remediate access when it is no longer required and conduct regular access reviews and audits to maintain compliance with security policies.
• Configure Saviynt workflows, birthright access rules, provisioning processes, and XML jobs.
• Respond to and resolve security incidents involving privileged access in a timely manner.
• Lead the implementation and delivery of enterprise IAM security projects.
• Collaborate with IAM engineers, architects, IT teams, business partners, and other cybersecurity professionals on major initiatives.
• Maintain IAM technical documentation, code repositories, and development environments.
• Provide technical guidance to the IAM operations team and serve as an escalation point for operational incidents.
• Serve as a technical subject matter expert and advise project teams on integrations with IAM technologies.
• Make technical and operational decisions on behalf of the IAM engineering team.

Who You Are

• At least five years of experience in IT services or the IAM domain, with a focus on Saviynt IGA implementations.
• Hands-on Saviynt IGA development experience.
• Experience developing or implementing one or more of the following Saviynt components:
  • Build Warehouse
  • Access Request System (ARS)
  • Rule Management
  • User Provisioning
  • Access Certification
  • Identity Analytics
  • Segregation of Duties (SOD)
• Experience with Saviynt capabilities such as:
  • Application onboarding
  • Provisioning and deprovisioning
  • Birthright provisioning
  • Application workflows
  • Analytics and reporting services
  • Delegation
• Can configure workflows and birthright rules supporting user onboarding within Saviynt.
• Experience creating XML jobs in the Saviynt IAM platform.
• Proficient in Java programming and database SQL scripting.
• Experience collaborating across multiple teams to deliver complex projects.
• Strong written and verbal communication skills.
• Highly organized, detail-oriented, and able to manage competing priorities.
• Can demonstrate uncompromising personal and professional integrity and ethics.

Education and Certifications

• Bachelor’s degree in Computer Science, Information Systems, Information Security, Engineering, or a related field.
• Saviynt IGA L100 and L200 certifications.

Preferred Qualifications

• Industry-recognized security or IAM certification, such as CISSP.
• Experience with privileged access management solutions, particularly Delinea Secret Server Cloud.
• Previous experience leading or managing IAM security engineers.
• Experience supporting IAM programs within a large, complex enterprise environment.