Sr. Staff Systems Engineer – Identity Governance & Access (SailPoint / Microsoft Entra ID)

Role overview Serve as the senior technical owner for identity governance and administration in a global, regulated environment. Lead the implementation and long-term operation of an identity governance platform, while providing deep engineering expertise across workforce identity lifecycle automation, directory services, and access controls.

Responsibilities - Own the identity governance platform’s configuration and operation, including tenant settings, virtual appliances, identity profiles, rules, provisioning policies, and deployments. - Lead implementation work with external delivery partners by reviewing architecture and designs, guiding testing, and ensuring knowledge transfer for ongoing ownership. - Automate joiner, mover, and leaver processes and onboard applications across directory services, cloud identity systems, SaaS, databases, and connected APIs. - Develop access governance capabilities such as requests, certifications, role-based controls, separation-of-duties policies, and service management integrations. - Provide technical leadership for cloud and on-premises identity, including single sign-on, provisioning, conditional access, phishing-resistant multifactor authentication, privileged access, and identity protection. - Promote least-privilege and Zero Trust practices, support audit and compliance needs, and use scripting and automation to improve identity operations.

Requirements - Typically, a technical bachelor’s degree and at least 13 years of related experience; or a master’s degree and at least 8 years of equivalent industry experience; or a PhD and at least 5 years of experience. - The role calls for hands-on experience building and operating the named identity governance platform in production, along with expertise in cloud identity and directory services.

Benefits and work setup - The position is home-office based and does not require living near an assigned site. A hybrid arrangement may be available for people within commuting distance of a site.