VP, Identity & Access Management Engineering Lead

VP, Identity & Access Management Engineering Lead
Santa Ana, CA- Hybrid
Direct Hire
$101k year- $168,500k year

Successful candidate will be responsible for the design, configuration, deployment, and support of Saviynt Identity Governance and Administration (IGA) solution and a Privileged Access Management (PAM) solution within a regulated financial environment. Will play a critical part in modernizing the identity lifecycle management, access certification, and privileged access controls to meet compliance, security, and operational goals. Lead the technical implementation of Saviynt IGA, including connector development, policy configuration, and workflow customization. Lead the selection and technical implementation of PAM solution, including account discovery and onboarding, password rotation, session management, application integration, and workstation privilege management. Collaborate with cross-functional teams (security, infrastructure, HR, application owners) to integrate Saviynt and the PAM solution with core financial systems, SaaS platforms, and on-premise applications. Define and implement role-based access control (RBAC), attribute-based access control (ABAC), and least privilege models. Develop and maintain identity lifecycle processes (joiner/mover/leaver), access request workflows, and certification campaigns. Ensure compliance with regulatory frameworks (e.g., FFIEC, SOX, GLBA) and internal audit requirements. Troubleshoot and resolve issues related to identity provisioning, de-provisioning, and access anomalies. Create and maintain technical documentation, including architecture diagrams, configuration guides, and SOPs.

Requirements:

• 5+ years of experience in IAM engineering.
• 2 years of hands-on Saviynt implementation experience OR 4 years of hands-on Sailpoint implementation experience.
• 4 years of hands-on CyberArk implementation experience across AD, servers, workstations, databases and network devices, including CPM, PSM, PSMP, CP and CCP, EPM, and Remote Access.
• Strong understanding of identity lifecycle, access governance, and directory services (e.g., Active Directory, Azure AD).
• Experience with SAML, OAuth, SCIM, REST APIs, and other identity protocols.
• Experience in a regulated banking or financial services environment, including familiarity with compliance and security standards relevant to financial institutions.
• Proficiency in scripting (e.g., PowerShell, JavaScript, Groovy) for automation and customization.

• Bonus Skills:
  • Certifications such as Saviynt Certified Engineer, CISSP, or CISM.
  • Exposure to cloud platforms (AWS, Azure) and hybrid identity models.
  • Master's degree in Computer Science or related field.

Welcome to ConsultNet and the family of companies, Tekne, SaltClick, TechBridge, and OmniMedia. As a premier national provider of technology talent and solutions, our expertise spans across project services, contract-to-hire, direct placement, and managed services both onshore and nearshore.

Celebrating more than 25 years of partnership with a diverse client base, we've crafted rewarding opportunities for our consultants, fostering high-performing teams that deliver impactful results.

Over the last few years thousands of consultants have found their calling with us in roles that have made a meaningful impact on their lives, enhanced their career, challenged them, and propelled them towards achieving their personal and professional goals. At the ConsultNet family of companies, we believe effective communication is crucial in aligning the right job with your unique skills and professional aspirations. To us, it's all about the personal approach we take and the values we uphold.

Our comprehensive service offerings cover a wide range of technology positions across key markets nationwide. Client more at .

We champion equality and inclusivity, proudly supporting an Equal Opportunity Employer policy. We welcome applicants regardless of Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other status protected by law.