Lead Saviynt Engineer

What you'll do

• Lead the design, development, and operation of identity lifecycle automation and SAP access governance using Saviynt Identity Cloud.
• Build and maintain custom connectors and integrations between Saviynt, SAP systems, and SAP GRC.
• Develop custom provisioning logic and scripting to handle complex role assignments and conditional access decisions.
• Design and implement automated SAP user and role provisioning aligned with compliance policies and least-privilege requirements.
• Translate SAP security constructs, including profiles and authorization objects, into Saviynt models.
• Establish engineering standards for Saviynt configuration, testing, deployment, and operational support.
• Design monitoring, logging, and alerting for provisioning and GRC workflows across HRIS, directories, and ITSM platforms.
• Act as the primary technical authority for SAP-related identity and GRC capabilities and initiatives.

What we're looking for

• Minimum of 15 years of related experience with a Bachelor’s degree; or 12 years with a Master’s; or a PhD with 8 years; or equivalent experience.
• 7+ years of experience in Identity & Access Management or Identity Governance.
• Strong hands-on experience with Saviynt, including advanced configuration and custom development.
• Proven expertise in SAP provisioning and access governance for platforms like ECC, S/4HANA, BW, or SuccessFactors.
• Demonstrated experience with Saviynt GRC for SAP and/or SAP GRC Access Control, including SoD rule design and risk analysis.
• Strong understanding of SAP security concepts, including roles, profiles, and authorization objects.
• Ability to design and debug complex identity and GRC integrations across multiple platforms.
• Deep hands-on experience with Saviynt GRC and SAP GRC configuration and operations (preferred).
• Experience integrating Saviynt with ServiceNow for access requests and fulfillment (preferred).
• Strong scripting and development skills in REST APIs, PowerShell, Python, or SQL (preferred).
• Experience with cloud identity ecosystems such as Entra ID, Okta, or Ping (preferred).
• Familiarity with SAP licensing considerations tied to roles and user types (preferred).
• Saviynt and/or SAP Security / SAP GRC certifications (preferred).