Sr Identity & Access Governance (IGA) Engineer (Sailpoint)

Your Opportunity At Schwab, you are empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

In Schwab Cybersecurity Services (SCS), Office of CISO, we provide platforms, services, and security operations capabilities which enable the firm to produce successful client and shareholder outcomes securely and safely. Securing our IT assets, data, and access to applications is the core of who we are and what we do. We ensure only the appropriate entities have access to IT resources and that we adhere to best practices and standards to ensure a safe and compliant environment is maintained.

Identity and Access Management has an opening for a Security Engineer to deliver and manage large, complex Identity and Access Management programs in the area of Identity Governance & Administration. The individual will ensure adherence to policy and provide leadership to the implementation of leading-edge technology to position the organization for success – improving efficiency, increasing security posture, and supporting growth of the firm’s Identity and Access Management (IAM) Program.

Serve as a Senior Identity Governance & Administration (IGA) Engineer , owning the design, implementation, automation, and operational maturity of enterprise IGA solutions across on‑prem and cloud environments. Lead the delivery of IGA solutions (e.g., SailPoint and other enterprise cloud based IGA platforms), supporting identity lifecycle (Joiner/Mover/Leaver), access requests, certifications, and policy enforcement. Drive IGA automation and AI readiness , leveraging workflow automation, event‑driven integrations, and analytics to reduce manual operations, improve access accuracy, and scale identity governance. Leverage AI and advanced analytics within IGA solutions to enhance risk detection, access recommendations, certification efficiency, and entitlement rationalization. Use IGA controls to protect AI systems and workloads , ensuring proper identity lifecycle governance, least privilege access, model/service ownership controls, and auditable access to AI platforms and data. Act as a technical authority and design partner to Security Architecture, IAM Governance, Infrastructure, and Application teams to define end‑to‑end identity and access solutions. Design and implement complex integrations with applications, data platforms, AI services, and infrastructure using REST APIs, connectors, SCIM, flat files, and event messaging. Develop and maintain custom IGA extensions including rules, workflows, transforms, and integrations using Java, BeanShell, Python, and scripting technologies. Lead access model design and optimization , including RBAC/ABAC strategies, entitlement consolidation, token bloat reduction, and least‑privilege enforcement. Provide senior technical leadership for IGA upgrades, cloud migrations, platform enhancements, and security remediation initiatives . Partner with audit, risk, and compliance teams to ensure alignment with security controls and regulatory requirements (e.g., SOX, SOC), proactively identifying and remediating gaps. Collaborate with Scrum Masters, Product Owners, and Project Managers to deliver solutions through Agile / SAFe execution models from design through production. Provide cross‑IAM support and guidance , collaborating with teams responsible for LDAP, Active Directory, SSO/federation, and Privileged Access Management (PAM) tools. Produce and own technical architecture documentation, standards, and operational runbooks , and mentor junior engineers to raise overall team capability. Contribute to the IAM and IGA strategy and roadmap , including future‑state