Lead Saviynt Engineer

What you'll do

• Lead the design, development, and operation of Saviynt Identity Cloud for SAP provisioning and integration with SAP GRC.
• Build and maintain automated Joiner/Mover/Leaver (JML) lifecycle workflows and risk-aware access request approvals.
• Develop custom Saviynt connectors and provisioning logic using scripting to integrate with SAP systems and HR sources.
• Translate complex SAP security constructs, including roles and authorization objects, into Saviynt models.
• Implement automated Segregation of Duties (SoD) rules and risk-based mitigation controls within the GRC framework.
• Design and maintain data correlation rules and attribute mappings to ensure high-quality identity data across systems.
• Act as the primary technical authority for SAP-related identity initiatives while mentoring junior IAM engineers.
• Manage end-to-end technical delivery including requirements gathering, testing, deployment, and steady-state operations.

What we're looking for

• Minimum 15 years of experience with a Bachelor's degree, or 12 years with a Master's, or a PhD with 8 years experience.
• At least 7 years of experience in Identity & Access Management (IAM) and Identity Governance.
• Advanced hands-on Saviynt experience including configuration and custom development.
• Proven expertise in SAP provisioning and access governance for platforms like ECC, S/4HANA, or SuccessFactors.
• Demonstrated experience with Saviynt GRC for SAP and SAP GRC Access Control, including SoD rule design.
• Strong understanding of SAP security concepts such as roles, profiles, and authorization objects.
• Ability to develop custom provisioning logic using scripting languages like PowerShell, Python, or SQL.
• Experience integrating Saviynt with ServiceNow and other cloud identity ecosystems like Entra ID or Okta.