[Hiring] Manager, Identity and Access Management @Xerox

Role Description

Xerox is seeking an experienced Identity & Access Management Engineering Manager to provide technical leadership in the design, implementation, and continued evolution of our enterprise IAM capabilities.

• Lead, mentor, and oversee a team of four Security Engineers specializing in Identity and Access Management.
• Engineer, develop, and maintain enterprise IAM solutions using Saviynt IGA and Delinea Secret Server Cloud, formerly Thycotic PAM.
• Develop new application integrations, account connectors, and entitlement connectors within the Saviynt platform.
• Design and develop Saviynt access-request forms based on business and operational requirements.
• Support the onboarding of new applications to the Saviynt IGA platform.
• Enhance access-review definitions and generate quarterly certification reviews to support audit requirements.
• Verify that user access and application entitlements align with each employee’s business role and job responsibilities.
• Remediate access when it is no longer required and conduct regular access reviews and audits to maintain compliance with security policies.
• Configure Saviynt workflows, birthright access rules, provisioning processes, and XML jobs.
• Respond to and resolve security incidents involving privileged access in a timely manner.
• Lead the implementation and delivery of enterprise IAM security projects.
• Collaborate with IAM engineers, architects, IT teams, business partners, and other cybersecurity professionals on major initiatives.
• Maintain IAM technical documentation, code repositories, and development environments.
• Provide technical guidance to the IAM operations team and serve as an escalation point for operational incidents.
• Serve as a technical subject matter expert and advise project teams on integrations with IAM technologies.
• Make technical and operational decisions on behalf of the IAM engineering team.

Qualifications

• At least five years of experience in IT services or the IAM domain, with a focus on Saviynt IGA implementations.
• Hands-on Saviynt IGA development experience.
• Experience developing or implementing one or more of the following Saviynt components:
  • Build Warehouse
  • Access Request System (ARS)
  • Rule Management
  • User Provisioning
  • Access Certification
  • Identity Analytics
  • Segregation of Duties (SOD)
• Experience with Saviynt capabilities such as:
  • Application onboarding
  • Provisioning and deprovisioning
  • Birthright provisioning
  • Application workflows
  • Analytics and reporting services
  • Delegation
• Can configure workflows and birthright rules supporting user onboarding within Saviynt.
• Experience creating XML jobs in the Saviynt IAM platform.
• Proficient in Java programming and database SQL scripting.
• Experience collaborating across multiple teams to deliver complex projects.
• Strong written and verbal communication skills.
• Highly organized, detail-oriented, and able to manage competing priorities.
• Can demonstrate uncompromising personal and professional integrity and ethics.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Information Security, Engineering, or a related field.
• Saviynt IGA L100 and L200 certifications.

Preferred Qualifications

• Industry-recognized security or IAM certification, such as CISSP.
• Experience with privileged access management solutions, particularly Delinea Secret Server Cloud.
• Previous experience leading or managing IAM security engineers.
• Experience supporting IAM programs within a large, complex enterprise environment.