Description

• Design and configure Saviynt access-certification campaigns for users, accounts, entitlements, roles, applications, privileged access, and other in-scope access populations.
• Configure campaign scope, reviewer assignment, certification rules, review periods, reminders, escalations, delegation, reassignment, expiration, and completion criteria.
• Develop recurring and event-driven certification models appropriate to application risk and control requirements.
• Configure and validate manager, application-owner, entitlement-owner, role-owner, and other reviewer models.
• Establish certification logic for high-risk, privileged, sensitive, orphaned, dormant, temporary, and exception-based access.
• Support certification requirements across connected and, where necessary, disconnected applications.
• Design campaign segmentation so reviews are understandable and manageable rather than overwhelming reviewers with unnecessarily large certifications.
• Configure certification actions and downstream remediation, including revoke, retain, reassign, exception, and remediation workflows.
• Ensure certification decisions flow through provisioning/deprovisioning and are reconciled against actual target-system outcomes.

Certification Governance & Control Effectiveness

• Establish traceability from certification requirement to campaign, reviewer, decision, remediation, target-system validation, and evidence.
• Confirm entitlement and application ownership is accurate before campaigns launch and route ownership gaps for remediation.
• Ensure retained access has accountable reviewer decisions and appropriate justification.
• Verify revoked access is actually removed downstream; identify and escalate failed revocations and reconciliation discrepancies.
• Support risk-based certification frequency based on application, entitlement, privilege, regulatory, and business criticality.
• Support segregation-of-duties and high-risk-access reviews where applicable.
• Maintain certification evidence suitable for audit, risk, compliance, and control testing.

Saviynt EIC Administration & Configuration

• Saviynt EIC / IGA administrative configuration and production support.
• Access Certifications and Campaigns.
• Access Request System, Enterprise Roles, Entitlements, Workflows, Rules, and Policies.
• User, account, entitlement, and role metadata; dynamic attributes and ownership models.
• Saviynt jobs, job monitoring, analytics, reporting, REST APIs, and connector troubleshooting.
• Provisioning policies, reconciliation, application onboarding, and downstream remediation.

Data Quality & Reconciliation

• Analyze identity, account, entitlement, role, and ownership data before campaign launch.
• Identify duplicate, orphaned, dormant, stale, excessive, and unowned access.
• Validate identity-account correlation and application / entitlement ownership.
• Establish pre-campaign data-quality checks and post-campaign reconciliation.
• Validate successful downstream revocation and develop analytics for recurring certification or remediation failures.

Reviewer Experience & Business Enablement

• Partner with Product, Governance, UX/OCM, and business stakeholders so reviewers can quickly understand:
• Who has the access and what the access provides.
• Why the access exists and how it was originally obtained.
• Whether the access is privileged, sensitive, temporary, or high risk.
• When it was last reviewed, when it expires, and what happens if it is revoked.
• Certification design should reduce rubber-stamp behavior rather than merely increase campaign throughput.

Production

• Monitor scheduled certification jobs and campaign execution.
• Troubleshoot reviewer, data, application, campaign-generation, and remediation issues.
• Monitor certification aging, failed remediation, and recurring operational exceptions.
• Support incident/problem management, root-cause analysis, runbooks, and support documentation.
• Support release regression testing and assess Saviynt product releases for certification impacts.
• Support audit evidence requests and identifies opportunities for automation and operational simplification.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Computer Engineering, Management Information Systems, or a closely related discipline; or equivalent combination of education and substantial relevant IAM/IGA experience.
• Master's degree in Cybersecurity, Information Systems, Technology Management, Computer Science, or related field preferred.
• Formal training in identity security, access governance, security controls, or risk management preferred.
• 7-10+ years of IAM / Identity Security experience.
• 4+ years working with IGA platforms such as Saviynt, SailPoint, Oracle Identity Governance, One Identity, or comparable enterprise IGA technologies.
• 2-3+ years of direct Saviynt EIC experience strongly preferred.
• 3+ years designing or operating access certifications / access reviews / attestation programs.
• Demonstrated experience implementing certification campaigns in a large, complex enterprise.
• Experience with entitlement governance, application ownership, role ownership, remediation workflows, and access-control evidence.
• Experience supporting production IAM/IGA systems and working in regulated or highly controlled environments strongly preferred.
• Experience integrating IGA with Active Directory, Entra ID, REST APIs, databases, SaaS applications, and enterprise systems.
• Experience with application onboarding, provisioning, deprovisioning, and reconciliation.

Technical Skills

• Saviynt: EIC administration; Access Certifications; Access Request System; Enterprise Roles; Entitlements; workflows; analytics; jobs; rules/policies; REST APIs; connectors; provisioning; reconciliation.
• IGA / IAM: Identity lifecycle; access governance; RBAC/ABAC; least privilege; access reviews; entitlement governance; SoD; privileged-access governance; orphan/stale access; exceptions; audit evidence.
• Other: REST / JSON / APIs; SQL; Active Directory; Entra ID; authentication / authorization concepts; scripting or automation; data analysis; log analysis; ITSM integration

Key Skills

Education

Bachelor's degree