Sr IAM Security Engineer

Milwaukee Tool is seeking a Senior IAM Security Engineer to own, operate, and continuously improve its Saviynt-based Identity Governance and Administration platform. The role focuses on IAM operations, enterprise integrations, identity governance, automation, platform reliability, technical leadership, and collaboration across security and application teams.

Responsibilities:

• Own day-to-day operation, support, and reliability of the Saviynt platform
• Troubleshoot and resolve provisioning, deprovisioning, reconciliation, and identity lifecycle failures across Oracle, Active Directory, Entra ID, and integrated applications
• Serve as the primary escalation point for IAM operational incidents and complex access issues
• Perform root cause analysis and implement long-term corrective actions to prevent recurring issues
• Monitor platform health, job execution, provisioning success rates, and service performance
• Develop and maintain operational runbooks, support documentation, and knowledge articles
• Participate in production support processes, change control, peer reviews, and CAB activities
• Design, build, enhance, and support Saviynt connectors, workflows, rules, policies, analytics, and certifications
• Develop and maintain integrations utilizing REST APIs, SOAP services, JDBC connections, and other enterprise integration methods
• Partner with application teams to onboard new applications and automate identity lifecycle processes
• Support Oracle Cloud, Oracle ERP, Active Directory, Entra ID, and other enterprise identity integrations
• Lead testing, validation, deployment, and upgrade activities for IAM platform enhancements
• Ensure IAM solutions are scalable, maintainable, and aligned with enterprise security requirements
• Support and improve Joiner, Mover, Leaver (JML) lifecycle processes
• Implement and maintain access request workflows, approval processes, and entitlement management
• Design, execute, and improve access certification campaigns and remediation activities
• Contribute to role-based and attribute-based access models (RBAC/ABAC)
• Support Segregation of Duties (SoD) controls, governance policies, and audit requirements
• Assist with identity correlation, reconciliation, entitlement cleanup, and governance optimization efforts
• Identify manual processes and develop automation solutions to improve efficiency and reliability
• Improve platform observability, monitoring, reporting, and operational metrics
• Develop dashboards and reporting that provide insight into platform health and governance effectiveness
• Improve testing practices, deployment processes, and operational maturity
• Drive continuous improvement initiatives focused on scalability, reliability, and user experience
• Serve as the technical lead for IAM engagements involving application teams and business stakeholders
• Guide technical design discussions and recommend IAM best practices
• Conduct peer reviews and contribute to engineering standards and reusable implementation patterns
• Mentor junior engineers and share knowledge across the IAM team
• Communicate technical concepts, risks, and recommendations clearly to both technical and non-technical audiences
• Balance security, operational stability, business requirements, and delivery timelines pragmatically
• Partner with Infrastructure, Security Operations, Cloud, and Application teams to deliver integrated identity solutions
• Support identity-related security incidents and remediation activities when required
• Contribute to IAM strategy, roadmap discussions, and future platform enhancements
• Assist with evaluation and adoption of new IAM technologies and capabilities

Requirements:

• Applicants must be authorized to work in the U.S.; Sponsorship is not available for this position
• 5+ years of hands-on experience in Identity and Access Management, Information Security, Platform Engineering, or related technical disciplines
• 3+ years of experience delivering Identity Governance and Administration (IGA) capabilities
• Experience administering and supporting enterprise IAM platforms such as Saviynt, SailPoint, Okta, EmpowerID, or similar technologies
• Strong troubleshooting and root cause analysis skills in complex production environments
• Experience with identity lifecycle management, access provisioning, deprovisioning, and governance processes
• Experience developing or supporting integrations utilizing REST APIs, SOAP services, JDBC connections, or similar technologies
• Working knowledge of Active Directory, Entra ID, and enterprise authentication and authorization concepts
• Experience with scripting or development technologies such as JavaScript, PowerShell, Python, Java, or similar languages
• Experience working within change control, peer review, and production support processes
• Strong written and verbal communication skills
• Ability to work independently while effectively collaborating with cross-functional teams
• Hands-on experience with Saviynt Enterprise Identity Cloud (EIC)
• Experience integrating IAM platforms with Oracle Cloud, Oracle ERP, Oracle EBS, SAP, or similar enterprise systems
• Experience with access certifications, role engineering, entitlement management, and Segregation of Duties controls
• Experience with SAML, OAuth, OpenID Connect (OIDC), MFA, and Single Sign-On technologies
• Experience supporting or integrating with Privileged Access Management (PAM) platforms such as Delinea, CyberArk, BeyondTrust, or similar solutions
• Experience automating operational processes and improving platform observability
• Familiarity with cloud identity and hybrid identity architectures
• Security certifications such as CISSP, CISM, Security+, SSCP, or related credentials
• Saviynt certifications or formal Saviynt implementation experience