This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Engineering Manager based in United States.
This is a senior engineering and architecture leadership role responsible for the technical direction of an Identity Governance and Administration (IGA) practice.
You’ll own end-to-end solution architecture across multiple identity engagements, from identity models and governance frameworks to integrations and migration strategies.
The role combines strategic leadership with hands-on technical oversight, giving you the opportunity to review and shape complex designs rather than simply manage teams.
You’ll lead a distributed engineering organization, mentor technical talent, establish delivery standards, and ensure high-quality outcomes across concurrent client programs.
You’ll work directly with IAM Directors, Enterprise Architects, and CISO organizations while influencing major identity and cybersecurity initiatives.
The environment is fast-moving and entrepreneurial, with significant opportunities to contribute to presales, reusable engineering IP, vendor partnerships, and practice growth.
This is an ideal opportunity for an experienced IAM/IGA leader who wants to combine technical authority, client impact, and engineering leadership.
Accountabilities:
- Own end-to-end solution architecture for IGA engagements, including identity models, authoritative source strategies, account correlation, entitlement catalogs, and target governance operating models.
- Act as the technical design authority across a portfolio of engagements, reviewing and approving connector designs, lifecycle and provisioning workflows, RBAC/ABAC models, segregation-of-duties rules, and certification campaign architectures.
- Build and lead a distributed engineering bench, including staffing engineers across the US and Pune, technical mentoring, code and configuration quality reviews, and career development.
- Own migration strategies for legacy-to-modern IGA transformations, including coexistence planning, data migration, sequencing, and cutover execution.
- Design and oversee joiner-mover-leaver automation using HR authoritative sources such as Workday, SuccessFactors, and SAP HCM, including birthright access, contractor lifecycle, non-employee management, and emergency deprovisioning.
- Serve as a senior technical advisor to client IAM Directors, Enterprise Architects, and CISO organizations, leading architecture reviews and design authority sessions.
- Support business development and practice growth through solution shaping, effort estimation, technical SOW development, RFP/RFI responses, and proof-of-concept leadership.
- Establish delivery governance across engagements, managing technical risks, dependencies, technical debt, and go/no-go recommendations at key delivery gates.
- Develop and maintain reusable practice IP, including reference architectures, connectors, accelerators, estimation frameworks, and design pattern libraries.
- Maintain strong technical relationships with leading identity technology vendors and contribute to certification programs and strategic partner development.
- Drive innovation across the IGA practice by identifying opportunities to improve delivery methodologies, technical solutions, and client outcomes.
Requirements
- 8+ years of experience in IAM/IGA, including at least 4 years leading engineering or architecture teams within a professional services, systems integration, or managed services environment.
- Deep hands-on experience with at least two major identity platforms, such as SailPoint IdentityIQ/Identity Security Cloud, Saviynt EIC, Okta Identity Governance, or Microsoft Entra ID Governance.
- Demonstrated expertise in full identity lifecycle design, including joiner-mover-leaver processes, birthright access, role-based provisioning, access requests and approvals, delegated administration, deprovisioning, and orphan-account management.
- Strong access governance expertise spanning certification and recertification programs, segregation of duties, toxic-combination modeling, role mining, RBAC/ABAC, and entitlement risk assessment.
- Strong understanding of identity and security integration standards, including SCIM 2.0, SAML 2.0, OAuth 2.0/OIDC, LDAP, JWT, and legacy SPML-based integration patterns.
- Experience integrating identity platforms with enterprise environments such as Active Directory, Entra ID, LDAP, Workday, SAP, ServiceNow, Salesforce, databases, and mainframe/RACF systems.
- Knowledge of adjacent cybersecurity disciplines, including privileged access management, least privilege, zero standing privilege, identity attack paths, and identity threat detection and response.
- Experience with non-human, machine, and workload identity governance, including secrets and service-account lifecycle management.
- Exposure to PAM technologies such as CyberArk, Delinea, or BeyondTrust and their integration into broader IGA programs.
- Experience with complex identity transformation scenarios such as mergers and acquisitions, divestitures, multi-tenant environments, or multi-forest consolidation.
- Experience delivering security and identity programs in regulated industries such as financial services, healthcare, or the public sector.
- Relevant professional or vendor certifications, such as CISSP, CIMP/IDPro, SailPoint Certified Architect, Saviynt L400, or Okta Certified Consultant.
- Familiarity with identity security and governance frameworks and regulatory requirements, including SOX ITGC, HIPAA, PCI DSS, GDPR, NIST 800-53, and ISO 27001.
- Strong client-facing presence with the ability to communicate effectively with Director- and CISO-level stakeholders.
- Excellent estimation, scoping, written communication, problem-solving, and stakeholder management skills.
- Comfortable balancing strategic leadership with hands-on technical involvement and making sound architectural decisions in complex environments.
Benefits
- Competitive annual salary range of $200,000–$230,000 USD.
- Full-time employment opportunity with a growing technology and professional services organization.
- Remote position within the United States, offering flexibility in how and where you work.
- Opportunity to lead a distributed engineering organization and shape the direction of an expanding IGA practice.
- High-impact exposure to complex enterprise identity, cybersecurity, and digital transformation initiatives.
- Significant opportunities for technical leadership, client engagement, mentoring, and professional growth.
- Exposure to major identity and security technology ecosystems and strategic vendor partnerships.
- Opportunities to contribute to reusable intellectual property, engineering accelerators, and innovative delivery methodologies.
- Collaborative environment focused on innovation, continuous learning, inclusion, and professional development.
- Opportunity to work directly with senior client stakeholders, including IAM leaders, enterprise architects, and CISO organizations.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
