Role Overview
The IAM/IGA Engineer is responsible for designing, implementing, supporting, and maintaining identity security solutions that ensure secure access to enterprise resources. This role focuses on identity lifecycle management, privileged access management, and governance processes across hybrid environments. Level 3 Engineering and Support escalations will also be handled by this position.
Key Responsibilities
- Identity Lifecycle Management
- Implement and manage provisioning, de-provisioning, and access certification processes.
- Support joiner/mover/leaver workflows and self-service access requests.
- Authentication & Authorization
- Configure and maintain Entra ID (Azure AD) for hybrid identity scenarios.
- Manage on-prem Active Directory and integrate with cloud identity solutions.
- Develop and enforce Conditional Access Policies and MFA strategies.
- Identity Governance
- Deploy and manage Saviynt IGA for access governance, risk analytics, and compliance.
- Standardize identity governance across applications and business processes.
- Privileged Access Management
- Implement and maintain CyberArk for vaulting, password rotation, and privileged session management.
- Ensure compliance with least privilege principles and break-glass account policies.
- Automation & Integration
- Develop PowerShell scripts for user provisioning, group management, and automation tasks.
- Integrate IAM workflows with ServiceNow for access requests and approvals.
- Security & Compliance
- Conduct regular access reviews and entitlement certifications.
- Ensure adherence to IAM standards and regulatory requirements.
- Support & Engineering
- Assist in resolving escalated support tickets that get routed to the IAM/IGA support queues.
- Engineer and support identity object hygiene and cleanup efforts across AD/AAD.
- Special Projects
- Support special projects that need IAM/IGA engineering resources.
- Review and update design and support documentation.
Required Skills & Experience
- Strong knowledge of Entra ID (Azure AD) and hybrid identity management.
- Hands-on experience with on-prem Active Directory administration.
- Expertise in Saviynt IGA platform for identity governance.
- Proficiency in CyberArk for privileged access management.
- Familiarity with ServiceNow for IAM workflow integration.
- Advanced scripting skills in XML, JSON, APIs, and PowerShell for automation.
- Understanding of RBAC, ABAC, and least privilege principles.
- Experience with compliance frameworks and audit processes.
- Proficiency at creating/reviewing/updating documentation and support articles.
Preferred Qualifications
- Certifications: Microsoft Certified - Identity and Access Administrator, CyberArk Defender, Saviynt Certified Professional.
- 5+ years of IAM/IGA experience in large-scale enterprise environments with complex identity ecosystems.
Skills Required
- Strong knowledge of Microsoft Entra ID (Azure AD) and hybrid identity management
- Hands-on experience administering on-premises Active Directory
- Expertise with the Saviynt IGA platform
- Proficiency with CyberArk for privileged access management
- Familiarity with ServiceNow IAM workflow integration
- Advanced scripting skills in XML, JSON, APIs, and PowerShell
- Understanding of RBAC, ABAC, and least privilege principles
- Experience with compliance frameworks and audit processes
- Proficiency creating, reviewing, and updating documentation and support articles
- Microsoft Certified: Identity and Access Administrator certification
- CyberArk Defender certification
- Saviynt Certified Professional certification
- At least 5 years of IAM/IGA experience in large-scale enterprise environments
Fortive Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Fortive and has not been reviewed or approved by Fortive.
-
Parental & Family Support — Parental leave is fully paid for 12 weeks for all parents, with fertility coverage via Progyny and generous adoption/surrogacy support. Backup child and adult care plus inclusive eligibility extend support across diverse family structures.
-
Healthcare Strength — Multiple PPO and HSA medical options include telemedicine and second-opinion services, alongside robust mental-health access through Spring Health with no‑cost therapy sessions. The breadth of medical and behavioral health resources is highlighted as a strength.
-
Retirement Support — The 401(k) provides a competitive employer match each pay period, with an additional company retirement contribution after one year of service. Financial wellness tools and an employee stock purchase plan further bolster long‑term savings.
Fortive Insights
What We Do
Fortive’s essential technology makes the world stronger, safer, and smarter. We accelerate transformation across a broad range of applications including environmental, health and safety compliance, industrial condition monitoring, next-generation product design, and healthcare safety solutions. We are a global industrial technology innovator with a startup spirit. Our forward-looking companies lead the way in software-powered workflow solutions, data-driven intelligence, AI-powered automation, and other disruptive technologies. We’re a force for progress, working alongside our customers and partners to solve challenges on a global scale, from workplace safety in the most demanding conditions to groundbreaking sustainability solutions. We are a diverse team 18,000 strong, united by a dynamic, inclusive culture and energized by limitless learning and growth. We use the proven Fortive Business System (FBS) to accelerate our positive impact. At Fortive, we believe in you. We believe in your potential—your ability to learn, grow, and make a difference. At Fortive, we believe in us. We believe in the power of people working together to solve problems no one could solve alone. At Fortive, we believe in growth. We’re honest about what’s working and what isn’t, and we never stop improving and innovating. Fortive: For you, for us, for growth.
.jpeg)
