The Opportunity:
Implements strategic cybersecurity initiatives, driving the development and enforcement of security policies, risk management processes, and incident response protocols. Leads security projects and operational processes that enhance organizational resilience against cyber threats. Directs security activities within projects, overseeing teams responsible for risk assessments, threat mitigation, compliance, and infrastructure protection. Works on complex security challenges, requiring an in-depth evaluation of emerging threats, regulatory requirements, and business impact, often adapting traditional security models to develop innovative defensive strategies. Communicates with and influences management, offering insightful cybersecurity recommendations, strategic guidance, and risk mitigation plans. Strengthens relationships with internal and external stakeholders. THE OPPORTUNITY:
Join our forward-thinking team as a SAVIYNT Architect responsible for designing, implementing, and optimizing Identity Governance and Administration (IGA) solutions using the Saviynt Security Manager (SSM) platform. This role requires a blend of SAVIYNT and SAP Security skillset. The architect will collaborate with security, IT, compliance, and business teams to deliver end-to-end identity lifecycle management, access governance and application onboarding.
WHAT WE'RE LOOKING FOR:
1. Architecture & Design
Develop and maintain the overall Saviynt solution architecture aligned with enterprise IAM strategy.
Design end-to-end workflows for identity lifecycle management, provisioning, access requests, and certifications.
Architect integrations between Saviynt and HRMS, Active Directory, Azure AD, SAP, cloud systems, and custom applications.
2. Implementation & Configuration
Lead Saviynt configuration includes workflows, rules, roles, analytics, dashboards, connectors, and access policies.
Design and build custom Saviynt connectors using REST APIs, JDBC, and SCIM where needed.
Configure SoD (Segregation of Duties) controls, risk models, and automated remediation rules.
3. Governance & Compliance
Ensure Saviynt meets regulatory standards such as SOX, GDPR, HIPAA, ISO 27001, and internal controls.
Implement and optimize access governance, certification campaigns, and risk scoring models.
Establish and enforce IAM standards, policies, and best practices.
4. Technical Leadership & Collaboration
Work closely with security teams, application owners, and infrastructure teams to onboard new applications and improve IAM posture.
Provide deep technical guidance to developers, analysts, and support personnel.
Lead troubleshooting efforts for complex Saviynt issues and performance concerns.
SAP Security Administration Responsibilities
User & Role Administration
Create and maintain SAP users (SU01, SU10).
Build and modify single, composite, and derived roles in PFCG.
Assign roles based on functional team requirements and access principles.
Authorization Troubleshooting
Investigate and resolve authorization issues using SU53, SUIM, ST01, and STAUTHTRACE.
Validate authorization objects, field values, and Associated access logic.
SAP Risk & GRC Management
Perform SOD analysis in SAP GRC or Saviynt.
Maintain firefighter/EM access and review logs.
Support periodic access review cycles and audit requests.
CERTIFICATIONS: Saviynt Certifications (e.g., Saviynt IGA Professional, Saviynt Cloud PAM).
EXPERIENCE: 8+ years of IAM experience with at least 4+ years hands-on Saviynt experience.
THOSE NECESSARY TO PERFORM THE JOB COMPETENTLY:
Bachelor’s degree in computer science, Information Security, Engineering, or related field (Master’s preferred).
Proficiency with: Directory services (AD, Azure AD)
Cloud platforms (AWS, Azure, GCP)
REST/SOAP APIs, SQL, JavaScript, JSON
Experience implementing IGA, PAM, and access governance capabilities.
Deep understanding of identity lifecycle management, RBAC/ABAC, SoD, and compliance frameworks.
Strong analytical,…