IAM Engineer – Identity Governance & Access Management

About the role

Levi Strauss & Co. is seeking a hands‑on IAM Engineer to strengthen its global Identity and Access Management ecosystem. You will work on both Identity Governance and Administration (IGA) and broader IAM platforms, ensuring secure access, compliance, and efficient identity lifecycle management.

Key responsibilities

• Design, develop, and configure IGA platform components (e.g., Saviynt) for identity lifecycle, access requests, certifications, and policy enforcement.
• Build and maintain connectors to enterprise systems such as Azure AD, ServiceNow, SAP, and cloud applications using REST APIs, SCIM, JDBC, PowerShell, etc.
• Develop workflows, business rules, and provisioning logic to automate access request, approval, and de‑provisioning processes.
• Implement access governance capabilities, including certifications, remediation workflows, and audit‑ready controls.
• Define and enforce RBAC/ABAC models, role mining, role design, and entitlement standardization.
• Design and monitor Segregation of Duties (SoD) policies within the IGA platform.
• Configure and manage Microsoft Entra (Azure AD) features such as Conditional Access, MFA, and identity protection.
• Support Privileged Identity Management and privileged access governance using Delinea and related PAM tools.
• Monitor identity and cloud threats with Microsoft Defender and assist with alert triage via Microsoft Sentinel.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3–5 years of experience in Identity & Access Management / IGA and cybersecurity.
• Strong hands‑on experience with IGA platforms (Saviynt, SailPoint, or similar).
• Proficiency in scripting and integration (Beanshell, PowerShell, REST APIs, SQL).
• Working knowledge of IAM concepts such as RBAC, ABAC, provisioning, JIT access, and compliance controls.

Required skills

• Saviynt or SailPoint
• Beanshell
• PowerShell
• REST APIs
• SQL
• Microsoft Entra (Azure AD)
• Conditional Access
• Multi‑Factor Authentication (MFA)
• Identity Protection
• Privileged Identity Management (PIM)
• Delinea (PAM)
• SSO
• OAuth
• SAML
• OpenID Connect
• Microsoft Defender
• Microsoft Sentinel