System Engineer II at Deltek in Location not listed

Identity Governance & Access Management / PAM

1. Serve as the technical point of contact for all IGA implementation and development efforts.

1. Assist in the design and development of IGA connectors and integrations with enterprise applications — SaaS, on-premise, and cloud.

1. Build and configure certification campaigns in Saviynt (user access reviews, entitlement certifications, role certifications), including workflows and decision routing.

1. Build and customize workflows, rules, roles, and policies in IGA to support provisioning, deprovisioning, and access reviews.

1. Build reviewer hierarchies and delegation rules so the correct approvers are assigned automatically.

1. Configure auto-remediation so revocations flow into connected systems (AD, SaaS apps) without manual execution.

1. Extend governance into Privileged Access Management (PAM) — onboarding privileged accounts, vaults, and elevated entitlements into the same certification, workflow, and review model as standard access.

1. Implement and operate PAM controls including credential vaulting, session management, just-in-time (JIT) elevation, and privileged session monitoring.

1. Partners with security teams to reduce standing privilege and enforce least-privilege access across critical systems.

1. Maintain the data quality behind certifications — identity correlation, role definitions, and application onboarding into Saviynt

Non-Human & Agentic Identity Governance

1. Govern the full lifecycle of non-human identities (NHIs) — service accounts, machine identities, secrets, and API credentials — including discovery, ownership assignment, risk-tiering, and periodic recertification.

1. Extend the identity governance plane to AI agents — registering agents, scoping least-privilege access via Saviynt, integrating with secrets management (e.g., Azure Key Vault), and enforcing runtime guardrails and approval gates.

1. Help eliminate shadow agents and orphaned NHIs through continuous discovery, dormancy detection, and drift alerts.

Automation & AI-Driven Engineering

1. Champion an automation-first approach — identifying manual identity and access processes that can be eliminated, self-serviced, or fully automated.

1. Design and maintain automation using REST APIs, JSON, SQL, and scripting languages (PowerShell, Python, JavaScript).

1. Leverage AI-powered tools and agents (e.g., Microsoft Copilot, Claude) to accelerate connector development, troubleshooting, documentation, and operational insights.

1. Apply AI to enhance governance activities such as access reviews, anomaly detection, and reporting — including Saviynt's native AI/rapid-onboarding capabilities.

Compliance, Audit & Operations

1. Support audit readiness and access attestation for regulatory and compliance frameworks (e.g., SOX, SOC 1 / SOC 2, NIST, FedRAMP).

1. Maintain the data quality behind certifications — identity correlation, role definitions, and application onboarding.

1. Own resolution of complex incidents and service requests through ITSM platforms (e.g., ServiceNow), ensuring SLA adherence, and mentor junior engineers on identity concepts and tooling.