Do you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
An exciting opportunity is available for a hands-on Identity Governance and Administration (IGA) Engineer to join the Global IAM Engineering team. The engineer will design, build, implement, maintain and operate the IGA platform that governs workforce and non-human access across MUFG's Americas, EMEA and Asia Pacific regions. This is an individual contributor engineering role at AVP level, focused on technical depth and delivery.
The engineer is expected to have deep knowledge of IGA across all domains and controls: identity lifecycle (joiner-mover-leaver), access request and approval, provisioning and de-provisioning, access certification, role and entitlement management, policy and segregation of duties (SoD), application onboarding, and non-human identity governance. The engineer must understand how each control is designed to work, how to implement it on the platform, and how to keep it operating reliably and in line with regulatory expectations.
The role follows an automation-first operating model. The engineer will build request and approval forms, workflows, rules and integrations so that IGA processes run end to end with minimal human intervention, and manual tasks, tickets and exceptions are steadily removed. Close integration with ServiceNow (catalog, request fulfilment, incident, problem and change) and with HR sources, directories, applications and Privileged Access Management (PAM) platforms through APIs and connectors is central to the role.
At AVP level, MUFG expects the engineer to work independently from requirement to production: translating control and business requirements into technical designs, building and testing solutions, supporting audit and evidence needs, and resolving complex production issues through structured troubleshooting and root cause analysis. The engineer is also expected to coach junior engineers, document designs and standards, and explain complex technical matters in plain English to technical and non-technical stakeholders, including HR, IT Risk, Compliance, Infrastructure and application owners.
Candidates must have 6-10 years of Identity & Access Management experience, including at least 4 years of hands-on IGA engineering experience (e.g. Omada, SailPoint, Saviynt, other). Candidates must also demonstrate sound Cyber Security and IAM fundamentals, either through recognized qualifications or proven experience, and practical insight gained in similar enterprise, ideally regulated financial services, environments.
Key Responsibilities
IGA solution engineering: Design, configure, build, test and deploy IGA capabilities (lifecycle management, access requests, certifications, role and policy management, SoD, provisioning and reconciliation) from approved requirements and control designs.
Control implementation: Implement advanced IGA controls (joiner-mover-leaver, birthright and role-based access, access recertification, SoD preventive and detective checks, orphan and dormant account handling, privileged and…