Colliers is hiring an Engineer, Global Identity and Access Management

Responsibilities - Design, configure, and deploy Saviynt IGA solutions to support identity lifecycle management, application onboarding, access requests, certifications, and policy enforcement. - Onboard human and machine identities, applications, and directories (e.g., Active Directory, Entra ID) into Saviynt. - Develop and maintain joiner-mover-leaver workflows, access review campaigns, and SoD policies. - Troubleshoot and resolve provisioning, access, and entitlement issues; provide L2/L3 support and coordinate with vendors as needed. - Collaborate with internal teams (Security, HR, IT Ops, Application Owners) to align IAM solutions with business needs. - Good communication skills and experience working with internal teams and partners. - Document technical designs, configuration guides, and runbooks for IAM processes. - Identify opportunities for automation and continuous improvement within the IAM ecosystem. Knowledge, Skills & Abilities - 5–7 years of experience in IAM engineering, with at least 3 years hands-on with Saviynt. - Strong understanding of identity lifecycle, RBAC, and access governance principles. - Experience integrating Saviynt with AD/Azure AD, HR systems, and cloud applications. - Familiarity with SSO protocols (SAML, OIDC), REST APIs, and connector frameworks. - Proficiency in scripting (PowerShell, Java) and troubleshooting IAM workflows. - Excellent communication skills and experience working in global, cross-functional teams. Requirements - 3+ years hands-on experience with Saviynt. - Familiarity with PAM tools such as CPAM, Thycotic, BeyondTrust, CyberArk. - Proficiency with cloud platforms (Azure, AWS, GCP). - 5–7 years of relevant IAM experience. - Saviynt Certified IGA Professional preferred. - Experience with AD, EntraID, Google Cloud, PKI. - Background in compliance frameworks (SOX, GDPR, etc.).