Lead Application Architect

Role Overview

Federal Reserve Bank of San Francisco is seeking a highly experienced Saviynt Identity Governance and Administration (IGA) Lead Engineer / Architect to provide technical leadership, platform ownership, and post‑go‑live support for the Saviynt IGA environment.

The role will serve as the primary technical lead responsible for ensuring the platform is stable, secure, scalable, well‑documented, and ready for enterprise production operations. The ideal candidate is a seasoned IAM, cybersecurity, data, and systems engineering professional with hands‑on experience in Saviynt or comparable SaaS IGA platforms.

• Lead technical design, training, mentoring, and post‑go‑live stabilization of the SaaS IGA platform.
• Own platform design, configuration, validation, troubleshooting, production readiness, and post‑go‑live stabilization.
• Validate Joiner‑Mover‑Leaver processes and ensure connector stability, account aggregation, entitlement aggregation, provisioning, and reconciliation accuracy.
• Configure and support access request workflows, approval routing, access certifications, role models, policies, and provisioning rules.
• Partner with IAM, cybersecurity, HR, infrastructure, application owners, audit/compliance, and vendor teams.
• Lead root‑cause analysis and resolution of complex platform, workflow, connector, data, and provisioning issues.
• Analyze identity, account, entitlement, and provisioning data to identify risks and improve accuracy.
• Support audit, compliance, least‑privilege, access review, privileged access, and segregation‑of‑duties requirements.
• Develop technical documentation, runbooks, operating procedures, support guides, and knowledge transfer materials.
• Train, mentor, and guide IAM engineers and support teams on Saviynt operations, troubleshooting, and best practices.
• Provide strategic recommendations to improve IGA maturity, automation, scalability, security, and operational efficiency.

• Extensive hands‑on experience with Saviynt IGA or comparable SaaS IGA platforms.
• Strong background in Identity Governance and Administration, IAM, cybersecurity, access control, and enterprise security operations.
• Experience with Joiner‑Mover‑Leaver processes, access requests, certifications, provisioning, role management, policy configuration, and application onboarding.
• Strong understanding of connectors and integrations, including REST APIs, SCIM, JDBC, LDAP, SOAP, flat files, directories, SaaS applications, and enterprise systems.
• Experience with HR source integrations, Active Directory, Microsoft Entra  / Azure AD, cloud applications, and hybrid enterprise environments.
• Strong data architecture and analytical skills, including identity data modeling, correlation, reconciliation, normalization, reporting, and data‑quality analysis.
• Systems engineering experience with production platforms, infrastructure, monitoring, incident management, change control, release management, and operational support.
• Cybersecurity experience with least privilege, access risk, privileged access, audit controls, compliance, segregation of duties, and secure integration practices.
• Ability to troubleshoot complex issues across applications, infrastructure, identity data, workflows, connectors, and security controls.
• Excellent communication, documentation, leadership, training, mentorship, and stakeholder‑management skills.
• Must be a U.S. Citizen.

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Information Technology, Data Engineering, Systems Engineering, or a related technical field.
• Equivalent combination of advanced technical certifications and extensive enterprise IAM/IGA experience may be considered in lieu of a degree.
• Master’s degree in Cybersecurity, Information Systems, Computer Science, Data Architecture, or a related discipline preferred.
• Ten or more years of experience with all aspects of a project from design through development, testing, implementation, and production with extensive technical breadth through experience in the IT industry.

• Saviynt IGA certification required or must be obtained within an agreed period after hire.
• IG/A/IAM…