Lead Identity Governance & Administration (IGA) Engineer

Key Responsibilities:

• Lead technical architecture, design, configuration, and overall platform ownership for SaaS IGA.
• Design, implement, and enforce security controls including Conditional Access policies, Zero Trust principles, and regular access reviews
• Ensure stability and accuracy across identity lifecycle processes (Joiner-Mover-Leaver), access requests, provisioning, and certifications.
• Maintain and troubleshoot SaaS connectors, integrations, workflows, and provisioning logic.
• Partner with IAM, cybersecurity, HR, infrastructure, and application teams to support enterprise identity operations.
• Drive rootcause analysis, issue resolution, and postgolive stabilization.
• Develop technical documentation, runbooks, and operational support materials.
• Mentor junior engineers and provide technical leadership across IAM and SaaS initiatives
• Contribute to longterm IGA roadmap, automation, and platform scalability.
• Drive adoption of intelligent automation and orchestration across identity and SaaS workflows to minimize manual intervention and improve operational efficiency

Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or similar; or equivalent enterprise IAM/IGA experience.
• 7 or more years of IT experience with strong exposure to identity governance, IGA operations, and production platform support.
• Proven experience managing and integrating enterprise SaaS applications (e.g., Slack, Zoom, Salesforce, GitHub)
• Hands-on experience with SaaS IGA (configuration, workflows, connectors, provisioning, access requests, certifications).
• Familiarity with applying AI/automation to operations, access reviews, or anomaly detection
• Strong background in Identity Governance & Administration (IGA) and IAM fundamentals.
• Practical knowledge of HR source integrations and directory systems (Active Directory, Microsoft Entra ID / Azure AD).
• Strong communication skills and experience mentoring engineers or guiding technical teams.
• Experience working in enterprise or regulated environments with compliance, audit, and access controls.
• Must be a US Citizen or Green Card holder with intent to become US Citizen.

Preferred Skills/Certifications:

• Experience with other IAM/IGA tools (SailPoint, Okta, Ping, CyberArk).
• Saviynt certifications or willingness to obtain one.
• Cloud identity experience (Azure, AWS, GCP).
• Security certifications (CISSP, CISM, Security+).
• Background in role engineering, access modeling, or audit readiness.

#LI-Onsite

The selected candidate will reside within a reasonable commuting distance of the employing Reserve Bank and will work full-time onsite to satisfy or exceed the minimum number of onsite days required by the employing District. Reasonable commuting distance is defined as living within 50 miles a Reserve Bank location.

Base Salary Range: Min: $164,400Mid: $213,500 Max: $262,600 (Location: San Francisco)

Final salary and offer will be determined by the applicant's background, experience, skills, internal equity, and alignment with market data.

We offer a wonderful benefits package including: Medical, Dental, Vision, Pre-tax Flexible Spending Account, Backup Child Care Program, Pre-Tax Day Care Flexible Spending Account, Paid Family Care Leave, Vacation Days, Sick Days, Paid Holidays, Pet Insurance, Matching 401(k), and Retirement/Pension.

The Bank is committed to providing reasonable accommodations to individuals with disabilities to participate in the job application or interview process, perform essential job functions and receive other benefits and privileges of employment. The SF Fed is an Equal Opportunity Employer. If you need any assistance or accommodations due to a disability, please let us know atsf.hr.recruitment@sf.frb.org.

The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.

Always verify and apply to jobs on Federal Reserve System Careers (https://rb.wd5.myworkdayjobs.com/FRS) or through verified Federal Reserve Bank social media channels.

Privacy Notice