Engineering, Cybersecurity, Identity Governance and Administration (IGA), Principal

About TPG

TPG is a leading global alternative asset management firm, founded in San Francisco in 1992, has investment and operational teams around the world. TPG invests across a broadly diversified set of strategies, including private equity, impact, credit, real estate, and market solutions, and our unique strategy is driven by collaboration, innovation, and inclusion. Our teams combine deep product and sector experience with broad capabilities and expertise to develop differentiated insights and add value for our fund investors, portfolio companies, management teams, and communities.

TPG’s success depends on our people, and we build and sustain our world-class team by creating an inclusive, supportive culture within the firm that seeks excellence and encourages humility and transparency. The quality of our investments and our ability to build great companies depend on the originality of our insights. Reaching our firm’s full potential means supporting every team member to bring the fullness of their unique perspective to their work and to our community. We are committed to a diverse, equitable, and inclusive workplace to foster diversity of thought and reflect the breadth of our limited partners and portfolio companies. 

Description of Position

TPG has an exciting opportunity for an Identity Governance and Administration (IGA) Principal to join TPG’s Cybersecurity team. The number one focus of this role is the ground-up redesign and ongoing maturity of the firm’s IGA program. This is a hands-on, high-impact role for a senior practitioner who wants to shape an identity program rather than inherit one. TPG’s Cybersecurity team protects the firm’s applications, data, and clients across a fast-moving technology landscape. Identity is at the center of that mission — the firm’s access management platform serves as the hub connecting every business application, and getting identity governance right is foundational to everything else we do.

Principal Responsibilities

• Serve as a senior leader and subject-matter expert for the firm’s IGA program, helping to drive its strategy, roadmap, and day-to-day operation
• Play a key role in the ground-up redesign of TPG’s IGA program — partnering with our third-party advisory firm to reimagine identity tools, processes, and governance, and ensuring the resulting design reflects TPG’s business requirement
• Lead the implementation or migration effort for the selected IGA platform, including solution design, configuration, application onboarding, connector and integration development, and cutover planning
• Design and operate core IGA processes — joiner/mover/leaver lifecycle management, access requests and approvals, access certifications and reviews, role-based access control and role mining, segregation of duties, and governance of privileged access
• Serve as a liaison between technical and business teams — communicating effectively with system owners, data owners, and business managers to gather requirements, resolve issues, and drive adoption of new identity processes
• Develop a deep understanding of the identity and access structure of each supported business application — most importantly Microsoft Entra ID — and integrate those applications into the IGA platform
• Automate identity lifecycle and governance workflows through scripting, APIs, and platform-native capabilities to reduce manual effort and error
• Define metrics, reporting, and key performance indicators that demonstrate program maturity, audit readiness, and risk reduction; support internal and external audit requests
• Mentor and develop junior members of the IGA team, and help build identity governance expertise across the broader Cybersecurity organization
• Contribute to enterprise identity and access management standards, policies, and governance documentation

Requirements

• Minimum 5 years of experience focused on identity governance and administration
• Hands-on experience implementing and administering one or more enterprise IGA platforms (e.g., Saviynt, SailPoint), with experience leading a platform evaluation, migration, or greenfield deployment strongly valued
• Deep understanding of core identity governance concepts, including identity lifecycle management, provisioning and deprovisioning, access certification, role-based access control, and segregation of duties
• Strong working knowledge of Microsoft Entra ID and modern identity architectures, including federation and authentication standards such as SAML, OAuth 2.0, OpenID Connect, and SCIM
• Software programming or scripting experience (e.g., PowerShell, Python) and comfort working with REST APIs and application connectors
• Communicate effectively with system owners, data owners, business managers, and senior leadership — including the ability to explain identity risk to non-technical audiences and influence without direct authority
• Experience working with or managing third-party consultants, advisors, or implementation partners
• Be comfortable and capable swinging between efforts that are broad and strategic in scope to tasks that are tedious and require strict attention to detail
• Critically assess existing processes and systems, and drive constructive, evidence-based improvements while keeping current operations running
• Invite and provide evidence-based feedback in a timely and constructive manner
• Possess an ownership attitude as it relates to identifying errors, process inconsistencies, or security weaknesses

Preferred Qualifications

• Bachelor’s degree or higher in Computer Science, Information/Cyber Security, or a related field, or equivalent work experience
• Experience leading an IGA platform selection, replacement, or re-implementation, including RFP development and proof-of-concept evaluation
• Platform certifications such as Saviynt IGA Professional or SailPoint Identity Security certifications, or broader credentials such as CISSP, CISM, or CIAM
• Familiarity with privileged access management (PAM) tools and their integration with IGA platforms
• Experience securing cloud and SaaS identity environments (e.g., Microsoft 365, AWS, Azure) and integrating SaaS applications into governance workflows
• Experience in financial services or another regulated industry, including supporting SOX, SOC, or similar audit and compliance requirements