Principal Engineer, Cybersecurity, IGA (Remote)

About the role

Stryker is hiring a Principal Engineer, Cybersecurity, IGA for a fully remote position. The role builds and operates enterprise identity governance, authentication and authorization services that protect access across the organization, partnering with senior business, application and infrastructure stakeholders to turn requirements into scalable identity architecture, standards and controls. Preference is given to candidates living in the Eastern or Central time zones.

Key responsibilities

• Build, configure and operate enterprise IGA platforms such as SailPoint, Saviynt or Microsoft Entra ID Governance, with supporting directory and authentication services.
• Engineer identity lifecycle workflows for joiners, movers and leavers, including automated provisioning and deprovisioning.
• Implement access requests, approval workflows, access certification and recertification campaigns, RBAC models, role mining and segregation-of-duties rules.
• Configure authoritative sources, identity reconciliation and identity data quality remediation.
• Implement SSO, MFA, federation and risk-based authentication using SAML, OAuth, OpenID Connect and SCIM.
• Develop PowerShell, Microsoft Graph, REST API and SCIM automations and integrations to onboard applications to IGA services.
• Produce identity reporting, integration governance and audit evidence for access controls, and troubleshoot IGA, provisioning and directory issues while maintaining documentation.
• Execute IAM controls supporting SOX, HIPAA, ISO 27001 and NIST CSF compliance.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering or a related discipline, or equivalent practical experience.
• Minimum 8 years of experience in IT or cybersecurity.
• Minimum 5 years of hands-on experience engineering and operating IGA or IAM environments.
• Experience gathering requirements from senior stakeholders and defining enterprise identity governance standards, patterns and controls.

Required skills

• SailPoint, Saviynt or Microsoft Entra ID Governance, plus Active Directory and Microsoft Entra ID.
• Identity lifecycle management, provisioning/deprovisioning, access certification, RBAC and segregation-of-duties enforcement.
• SAML, OAuth, OpenID Connect and SCIM.
• PowerShell, Microsoft Graph or REST APIs.
• Preferred: SailPoint IdentityIQ or IdentityNow engineer, Saviynt, Microsoft SC-300 or CISSP certification.