• • • Provide thought leadership to customers for IGA in general and Saviynt in specific
    • Provide industry wide best solution for the customer’s use cases meeting functional as well as non-functional requirements
    • Provide consulting and advisory skills, capable of addressing customer expectations
    • Architect and deploy Saviynt Identity Governance solution to meet internal customer requirements
    • Design, deploy, implement, and integrate Saviynt with critical applications and infrastructure
    • Follow approved life cycle methodologies, create documentation for design and testing
    • Interact/coordinate with customers as required
    • Provide technical oversight and direction to mid-level and junior Engineers
    • Train and Groom top talent to be experts in Saviynt technology and IAM in general
    • Coordinate with the product engineering team to advocate for the new features in the product
    • Resolve technical issues through debugging, research, and investigation.
    • Provide technical expertise and real-life experience in creating solutions, designs, proof of concept, and implementation
    • Ensures delivery of high-quality product on time and within budget

• • • Bachelor’s/equivalent in Engineering
    • 14+ years of industry experience in design, development, customization, configuration, deployment of any Identity Management and Governance products
    • Thorough domain knowledge on User Lifecycle Management, Provisioning and Reconciliation, Auditing, Reporting, and user activity Monitoring, Access Certification, SOD, Cloud Security
    • Direct customer interaction and management skills
    • Strong technical presentation and communication skills, both verbal and written
    • Knowledge of Java/J2EE, SQL, Web Services (REST/SOAP), Directories, etc.
    • Strong consulting and advisory experience
    • Good problem solving and analytical skills
    • Experience with RFP responses and proposals

    Good To Have:

    • • • Cybersecurity certifications (CISSP, CISA, CISM, CompTIA Security+ and CEH etc.)
        • Saviynt or any equivalent IGA product certification

• Define DevSecOps strategy and Influence architecture and platform decisions
• Design and implement secure CI/CD pipelines with integrated security controls
• Embed security practices into SDLC (shift-left approach)
• Integrate and operationalize controls aligned with FedRAMP and cloud security best practices
• Apply secure coding practices aligned with OWASP Top 10 to reduce application vulnerabilities
• Automate security testing (SAST, DAST, SCA, container scanning, IaC scanning)
• Define and enforce secure coding standards and best practices
• Secure cloud environments (AWS / Azure / GCP) following FedRAMP security controls (NIST 800-53) where applicable
• Implement identity and access management (IAM), secrets management, and network security controls
• Harden Kubernetes clusters and containerized workloads
• Build and maintain security automation frameworks
• Develop scripts and tools (Python, Go, Bash) to improve security posture
• Monitor vulnerabilities and drive remediation efforts
• Identify and remediate vulnerabilities mapped to OWASP Top 10 categories

• 7+ years of experience in relevant roles
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field
• Hands-on experience with SAST, DAST, SCA, IaC, and container supply chain security
• Strong understanding of DevOps, DevSecOps, and Security Engineering principles
• Familiarity with compliance frameworks such as FIPS, CIS, FedRAMP, and NIST
• Strong experience with CI/CD tools (Jenkins, GitHub Actions, GitLab CI, etc.)
• Hands-on experience with cloud platforms (AWS, Azure, or GCP)
• Deep understanding of containerization (Docker) and orchestration (Kubernetes)
• Experience with Infrastructure as Code tools (Terraform, CloudFormation, etc.)
• Strong knowledge of application and infrastructure security principles
• Proficiency in scripting or programming languages (Python, Go, Bash, etc.)

Good to have

Good understanding of AI models like Claude, Gemini and any other GPT models

Working knowledge of AI Agents,  MCP, LangChain, LangGraph and securing them

• Build and deploy AI agents that automate customer escalation workflows — reducing resolution times and improving engineering efficiency.

• Integrate agentic capabilities into identity platforms, translating customer needs into engineering roadmap contributions.

• Drive innovation at the intersection of AI, Identity Governance (IGA), and cybersecurity — helping enterprises govern Non-Human Identities and agentic workflows.

• Serve as a technical liaison between Customer Support, Customer Success, Sales Engineering, and Product — bridging the gap between customer pain points and scalable solutions.

• Engage directly on customer calls to represent Engineering and, where needed, prepare Engineering executives ahead of escalations.

• Identify and champion tooling improvements — proposing new troubleshooting and performance analysis tools that raise the bar for the wider engineering org.

• Track and report on escalation metrics, providing executive-level summaries and holding teams accountable to resolution timelines.

• Help the CE team navigate competing priorities and align on strategies that move the needle for the business.

• 10+ years of software engineering experience, with 8+ years in customer-facing or customer engineering roles.

• Proven experience in large-scale, multi-tenant production environments.

• Curiosity and fluency across modern AI tooling — MCP, A2A protocols, agentic frameworks — and a mindset for continuous learning in uncharted territory.

• Hands-on experience with AI-assisted SDLC tools (Amazon Q, GitHub Copilot, Cursor, Claude, or similar).

• Strong command of testing practices — unit, functional, and system integration — and agile methodologies (Scrum and Kanban).

• Solid experience with Git, CI/CD pipelines, and automated deployments.

• Deep understanding of APIs, enterprise integrations, and distributed systems.

• Outstanding communication skills — equally comfortable in an engineering deep-dive and a customer executive briefing.

• Experience in Identity & Access Management (IAM / IGA) strongly preferred; familiarity with Zero Trust, PAM, or governance frameworks is a meaningful plus.

• Education: Bachelor’s degree in Engineering, Computer Science, or a related technical field.

• Experience: 7-10 years of Product Management/Product Owner experience with a proven track record of delivering successful software products.

• Technical Fluency: Requires advanced SQL skills and the ability to seamlessly translate and discuss technical requirements with engineering teams.

• Product Methodologies: Deep expertise in agile development and product management frameworks.

• Analytical & Design Skills: Strong problem-solving abilities to drive data-backed decisions, combined with a solid understanding of UX/UI best practices.

• Global Collaboration: Exceptional communication and leadership skills, with the flexibility to work across multiple global time zones with diverse stakeholders.

• Preferred: Domain knowledge in Posture, IAM, IGA, or PAM.

• Preferred: Understanding of Large Language Models (LLMs) and experience with at least one major cloud provider (AWS, GCP, or Microsoft Entra).

● Build and maintain modular integrations between Saviynt and third-party Tech/Cloud partners using REST APIs, SOAP, and various scripting languages (e.g., Python,JavaScript).
● Assist in the technical mapping of data schemas between disparate systems to ensure seamless identity and governance workflows.
● Debug and resolve technical issues within existing integration packages, ensuring high performance and reliability in production-level environments.
● Architect and maintain "Golden" demo environments and multi-tenant sandbox instances for partner developers and internal stakeholders.
● Automate the provisioning of test data and configuration sets to ensure repeatable,"clean-slate" testing for new integration features.
● Write clean, well-documented code and maintain detailed API documentation and "Getting Started" guides for external developers.
● Support the "Technical Validation" phase by providing sample code, and boilerplate templates to partners.
● Work directly with Product and Senior Engineering teams to translate high-level integration requirements into technical tasks and tickets (Jira).

● Provide feedback to the Core Engineering team regarding API limitations or performance bottlenecks discovered during partner implementations.
● 8+ years of professional experience in software development or a technical
support/implementation role, ideally within the cybersecurity or SaaS space.
● Foundational knowledge of Identity & Access Management (IAM): Familiarity with core concepts (IGA, Privileged Access, or Identity Governance) and a strong desire to become a Saviynt subject matter expert.
● Hands-on experience with Integration Protocols: Proficiency in working with REST APIs, JSON, and SCIM. Basic understanding of authentication flows like OAuth, SAML, or LDAP.
● Coding Proficiency: Strong internal logic and experience scripting or developing in languages such as Java, Python, or JavaScript.
● Technical Troubleshooting: Proven ability to debug code, analyze API responses, and resolve integration errors in a development or staging environment.
● Clear Communication: Ability to document technical workflows and explain technical issues clearly to senior engineers and internal stakeholders.
● Collaborative Mindset: Comfortable working in an agile, fast-paced environment and taking direction from senior architects and product managers.

• 10+ years in SRE / Platform / Distributed Systems Engineering.
• Proven experience designing and operating large-scale distributed systems.
• Deep expertise in:
• AWS architecture at scale
• Kubernetes internals and operations
• System reliability, scalability, and performance engineering
• Strong programming skills (Python / Go) with focus on building platforms/tools.
• Experience leading cross-functional technical initiatives.
• Ability to influence architecture and engineering culture across the company.

AI / LLM & Future Systems (Highly Valued)

• Experience integrating LLMs into production systems (e.g., via OpenAI API).
• Built or designed AI-driven automation / AIOps systems.
• Familiarity with:
• Agent frameworks (LangChain, AutoGen)
• RAG pipelines and vector databases
• Strong interest in autonomous systems and self-healing infrastructure.

• Own and define the long-term reliability strategy and architecture.
• Design planet-scale, highly resilient systems on AWS and Kubernetes (EKS).
• Lead the development of autonomous operations platforms powered by AI agents.
• Architect and implement LLM-driven SRE systems using tools like the OpenAI API:
• Intelligent incident detection and triage
• Automated root cause analysis
• Self-healing remediation systems
• Establish gold standards for SRE practices:
• SLOs, SLAs, error budgets
• Incident management frameworks
• Reliability-first system design
• Drive observability architecture at scale (metrics, logs, traces, events).
• Lead cross-team initiatives to embed reliability into product and platform design.
• Mentor senior engineers and act as a technical authority across teams.
• Guide decisions around cost optimization, scalability, and performance trade-offs.
• Introduce chaos engineering and resilience testing at system-wide level.

• Serve as the Governance POC both internally and externally. Identify governance or compliance requirements, assess risks, review required forms, and serve as liaison across cross functional teams to help achieve Info Sec objectives.
• Maintain compliance calendar and be accountable for the execution of various compliance assessments throughout the year, including but not limited to ISO 27001, FedRamp, PCI-DSSS, SOC 1, SOC 2.
• Have a working knowledge of the NIST CSF and RMF frameworks
• Support customer requests as they pertain to Compliance queries and to other Information Security questions, with the support of technical Info Sec members
• Develop and update Policies, Standards and Procedures per the organization’s policy framework
• Establish and lead risk management activities, including identification of risk and recommended mitigations; track and manage risks and issues from identification through closure.
• Establish and maintain appropriate metrics that will help measure the GRC posture of the company 
• Collaborate with key stakeholders to ensure successful execution of mission and business needs.
• Execute on GRC initiatives as defined within the security roadmap, while working with the broader Information Security team and technology teams
• Conduct risk assessments, compile risk registers, and track risk remediation plans
• Respond to requests from customers for information on our security measures
• Completing vendor security reviews. Optimize and automate security questionnaire process.
• Review security clauses in customer and vendor contracts
• Establish, review, and enhance security training and awareness programs
• Support the business with customer engagements, including attending customer calls and supporting sales teams

• Bachelor’s degree with a minimum of 8 years of experience
• Knowledge of risk management processes and requirements, including NIST RMF and NIST 800-53 Rev 5 controls
• Experience managing Agile projects with a focus on duties related to Product Owner
• Experience developing executive level presentations to support
• Governance and broader Information Security updates to appropriate audiences
• Experience assessing project and technical documentation to ensure compliance with established policies, processes, and procedures.
• Requires sufficient technical background to be able to interpret audit and compliance requirements
• Ability to provide excellent written and oral communications by email, presentations, and mobile communication platforms (including: experience facilitating discussions, briefing senior managers, and conducting project meetings).
• Experience supervising or managing an Agile project team.
• Work on multiple projects and tasks concurrently
• Experience defining project scope and objectives, developing detailed work products (schedules, status reports, etc.), conducting project meetings, and owning responsibility for project tracking and analysis.
• Knowledge of local legal and regulatory security requirements including HIPAA, FedRAMP, and GDPR/privacy
• Flexible and collaborative approach to enabling and supporting the business
• Strong stakeholder and relationship management skills

Detection Engineering & Content Development
● Design, develop, and deploy advanced detection rules and logic across SIEM, EDR, CSPM, and cloud-native security platforms.
● Build and maintain detection-as-code using modern frameworks and version control systems (Git).
● Create high-fidelity, low-noise detections mapped to the MITRE ATT&CK framework, focusing on cloud-specific threats and techniques.
● Continuously research emerging threats, TTPs (Tactics, Techniques, and Procedures), and translate threat intelligence into actionable detection content.
● Perform detection efficacy testing and validation using purple team exercises and adversary emulation frameworks.
AI & Machine Learning Integration
● Leverage AI/ML capabilities within security platforms to enhance threat detection accuracy and reduce false positives.
● Build and tune machine learning models for anomaly detection, behavioral analytics, and predictive threat identification.
● Integrate generative AI and large language models (LLMs) to accelerate alert triage, investigation workflows, and threat analysis.
● Evaluate and implement AI-powered security tools for automated threat detection, alert enrichment, and investigation assistance.
● Monitor and optimize AI/ML model performance, addressing data quality, model drift, and false positive/negative rates.

Cloud Security Detection & Monitoring
● Act as a Subject Matter Expert (SME) for cloud security detection engineering across AWS, Azure, and GCP environments.
● Design detections leveraging cloud-native logs (CloudTrail, Azure Activity Logs, GCP Audit Logs) and security services (GuardDuty, Security Command Center, Defender for Cloud).
● Build detections for cloud-specific threats including misconfigurations, identity compromise, data exfiltration, and infrastructure attacks.
● Monitor container and Kubernetes environments, developing detections for runtime threats and supply chain attacks.
Security Automation & Orchestration
● Design and implement automated detection deployment pipelines using secure CI/CD methodologies.
● Build custom scripts (Python, PowerShell, Bash) for automated alert enrichment, evidence collection, and response actions.
● Develop and maintain automated response playbooks in SOAR platforms to handle detection-triggered workflows.
● Integrate security tools via APIs to create seamless, automated detection and response ecosystems.
● Identify opportunities to apply automation and AI to reduce Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
Continuous Improvement & Collaboration
● Analyze detection performance metrics, false positive rates, and coverage gaps to drive continuous improvement.
● Collaborate with threat intelligence, incident response, and threat hunting teams to refine detection strategies.
● Create and maintain comprehensive documentation for detection logic, tuning procedures, and operational runbooks.
● Provide technical guidance on detection engineering best practices and emerging technologies.
● Stay current with the latest security research, adversary techniques, and AI/ML
advancements in cybersecurity.

Bachelor's degree in Computer Science, Information Security, Data Science, or a
related field.
● 8-12 years of experience in cybersecurity with at least 4+ years focused on detection engineering, threat detection, or security analytics.
● Strong Cloud Security Detection Skills: Deep, hands-on experience building detections for at least one major cloud provider (AWS, Azure, or GCP), including native security services and log sources.
● AI/ML Security Experience: Practical experience applying machine learning, anomaly detection, or AI-powered tools to security use cases. Understanding of AI/ML model development, tuning, and evaluation.

● Detection Engineering Expertise: Proven track record of creating high-quality detection content using SIEM platforms (Splunk, Azure Sentinel, Chronicle), EDR solutions (CrowdStrike, Microsoft Defender), and cloud security tools.
● Automation & Scripting Proficiency: Strong programming skills in Python (required), with experience in PowerShell or Bash. Ability to build detection pipelines and automation frameworks.
● Technical Depth: Hands-on experience with SOAR platforms, detection-as-code frameworks, log analysis, and data correlation techniques.
● MITRE ATT&CK Mastery: Expert-level understanding of the MITRE ATT&CK framework and its application to detection engineering and threat modeling.
● Analytical Mindset: Strong problem-solving skills with the ability to analyze complex data sets, identify patterns, and translate findings into detection logic.

Good to Have
● Certifications: GIAC Certified Detection Analyst (GCDA), GIAC Cyber Threat Intelligence (GCTI), AWS Certified Security Specialty, Azure Security Engineer Associate, or equivalent.
● Experience with threat intelligence platforms (TIPs) and threat hunting methodologies.
● Knowledge of adversary emulation tools (Atomic Red Team, Caldera,etc.).
● Familiarity with data science tools and frameworks (Jupyter, pandas, scikit-learn).
● Contributions to open-source detection content repositories (Sigma rules, detection
rules, etc.).

• Own uptime, reliability, and performance of services running on AWS + Kubernetes (EKS).
• Design and implement self-healing infrastructure using automation and AI agents.
• Build LLM-powered operational tooling using APIs such as the OpenAI API for:
• Intelligent alert triage
• Incident summarization
• Root cause analysis
• Runbook automation
• Manage and scale Kubernetes workloads:
• Deployments, autoscaling, resource optimization
• Cluster reliability and cost efficiency
• Build and evolve observability systems:
• Metrics (Prometheus), dashboards (Grafana)
• Logs (ELK / OpenSearch)
• Tracing (OpenTelemetry)
• Define and enforce SLOs, SLAs, and error budgets tied to business metrics.
• Automate infrastructure using Terraform and CI/CD pipelines.
• Lead incident response, postmortems, and continuous reliability improvements.
• Introduce chaos engineering practices to proactively test system resilience.

• 8+ years in SRE / DevOps / Platform Engineering.
• Strong hands-on experience with:
• AWS infrastructure at scale
• Kubernetes (production-grade clusters)
• Proven ability to debug complex distributed systems under pressure.
• Strong coding skills (Python or Go)—you build internal platforms and tools.
• Experience implementing monitoring, alerting, and incident management systems.

Bonus (AI / LLM Focus)

• Experience working with LLM APIs such as the OpenAI API.
• Familiarity with agent frameworks like:
• LangChain
• AutoGen
• Built or experimented with:
• AI agents for DevOps / SRE workflows
• Retrieval-Augmented Generation (RAG) systems
• Vector databases (Pinecone, Weaviate, etc.)
• Exposure to AIOps or intelligent automation systems.

• 5+ years in SRE / DevOps / Platform Engineering.
• Strong hands-on experience with:
• AWS infrastructure at scale
• Kubernetes (production-grade clusters)
• Proven ability to debug complex distributed systems under pressure.
• Strong coding skills (Python or Go)—you build internal platforms and tools.
• Experience implementing monitoring, alerting, and incident management systems.

Bonus (AI / LLM Focus)

• Experience working with LLM APIs such as the OpenAI API.
• Familiarity with agent frameworks like:
• LangChain
• AutoGen
• Built or experimented with:
• AI agents for DevOps / SRE workflows
• Retrieval-Augmented Generation (RAG) systems
• Vector databases (Pinecone, Weaviate, etc.)
• Exposure to AIOps or intelligent automation systems.

• Own uptime, reliability, and performance of services running on AWS + Kubernetes (EKS).
• Design and implement self-healing infrastructure using automation and AI agents.
• Build LLM-powered operational tooling using APIs such as the OpenAI API for:
• Intelligent alert triage
• Incident summarization
• Root cause analysis
• Runbook automation
• Manage and scale Kubernetes workloads:
• Deployments, autoscaling, resource optimization
• Cluster reliability and cost efficiency
• Build and evolve observability systems:
• Metrics (Prometheus), dashboards (Grafana)
• Logs (ELK / OpenSearch)
• Tracing (OpenTelemetry)
• Define and enforce SLOs, SLAs, and error budgets tied to business metrics.
• Automate infrastructure using Terraform and CI/CD pipelines.
• Lead incident response, postmortems, and continuous reliability improvements.
• Introduce chaos engineering practices to proactively test system resilience.