Information Security Engineer III- Eng (Saviynt PAM & IGA)

**About the Role** UKG is seeking an experienced **Information Security Engineer III** to join our Identity & Access Management (IAM) team. The ideal candidate will have hands-on experience with **Saviynt Privileged Access Management (PAM)** and **Identity Governance & Administration (IGA)** to help design, implement, and support enterprise identity security solutions. You will collaborate with cross-functional teams to strengthen UKG's security posture through secure access management, automation, and governance across on-premises and cloud environments. **Key Responsibilities** + Design, implement, and support Saviynt PAM and IGA solutions. + Configure and manage privileged account onboarding, credential vaulting, password rotation, access request workflows, and privileged session management. + Implement and support identity lifecycle management, access provisioning/deprovisioning, access certifications, RBAC, and segregation of duties (SoD) controls within Saviynt. + Integrate Saviynt with enterprise applications, Active Directory, Microsoft Entra ID, cloud platforms, databases, and infrastructure using connectors, REST APIs, SCIM, LDAP, and JDBC. + Develop and maintain automation scripts to improve IAM/PAM operational efficiency. + Troubleshoot platform, connector, provisioning, and integration issues while ensuring high availability and performance. + Collaborate with Security, Infrastructure, Cloud, Compliance, and Application teams to onboard applications and privileged accounts. + Support platform upgrades, release activities, audit requests, and compliance initiatives. + Create technical documentation, operational runbooks, and knowledge articles. + Mentor junior team members and contribute to continuous improvement of IAM engineering practices. **Required Qualifications** + Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. + **5-9 years** of experience in Identity & Access Management (IAM), Information Security, or Cybersecurity. + Hands-on experience implementing and administering **Saviynt Identity Cloud** , including **PAM** and **IGA** capabilities. + Experience with identity lifecycle management, provisioning, access requests, certifications, RBAC, SoD, and privileged access governance. + Strong understanding of PAM concepts, Identity Governance, Zero Trust, and least-privilege principles. + Experience integrating enterprise applications using REST APIs, SCIM, LDAP, JDBC, and web services. + Experience with Active Directory, Microsoft Entra ID, Windows, Linux, and cloud platforms (AWS, Azure, or GCP). + Knowledge of authentication and federation standards, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and LDAP. + Experience with SQL and scripting using PowerShell, Python, or Shell. + Strong analytical, troubleshooting, communication, and collaboration skills. **Preferred Qualifications** + Experience integrating ServiceNow and enterprise security tools. + Familiarity with Agile methodologies and DevSecOps practices. + Knowledge of compliance frameworks such as SOX, SOC 2, ISO 27001, PCI DSS, and GDPR. + Relevant certifications such as Saviynt Certified Engineer/Professional, CISSP, Security+ or similar. **Technical Skills** + Saviynt Identity Cloud (PAM & IGA) + Identity Lifecycle Management + Access Provisioning & Certifications + Privileged Access Management + Role-Based Access Control (RBAC) + Segregation of Duties (SoD) + Active Directory & Microsoft Entra ID + REST APIs, SCIM, LDAP, JDBC + SQL + PowerShell, Python, Shell Scripting + Windows & Linux Administration + AWS, Azure, or GCP + SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) **Why UKG** At UKG, you'll help build and secure enterprise identity solutions that protect millions of users worldwide while working with modern cloud technologies and a collaborative, people-first engineering culture. It is the policy of Ultimate Software to promote and assure equal employment opportunity for all current and prospective Peeps without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status entitled to protection under federal, state, or local anti-discrimination laws. This policy governs all matters related to recruitment, advertising, and initial selection of employment. It shall also apply to all other aspects of employment, including, but not limited to, compensation, promotion, demotion, transfer, lay-offs, terminations, leave of absence, and training opportunities.