Position Title: Identity Governance & Administration (IGA) Engineer

Job Type:

Location:

Shift:

Department:

Reports To:

Position Responsibilities

(100% of Role Allocation)

• Maintain, configure, and operate the Identity Governance and Administration (IGA) platform and related integrations with a focus on hands-on implementation and technical engineering.
• Build, code, and customize functionalities such as Access Provisioning, Access Requests, Access Recertification, IT Onboarding and Offboarding, and automated data flows to/from authoritative sources, including the Human Resources Management System (HRMS).
• Monitor and optimize system performance, ensuring maximum uptime, scalability, and security of IDAM services.
• Provide Level 2 (L2) and Level 3 (L3) support for IGA-related issues, troubleshooting complex problems and delivering timely, high-quality user experiences.
• Participate in shift rotations to deliver 16x5 operations for IDAM services and provide off-hours escalation support for high-priority incidents (P1, P2).
• Plan, execute, and supervise installations, maintenance, and changes across in-scope IDAM systems and services, utilizing coding and engineering expertise for efficient implementation.
• Develop, test, and deploy advanced functionalities, including APIs, web services, and custom solutions to extend and enhance IDAM capabilities.
• Identify opportunities to optimize IDAM solutions, introduce new features, and build compelling business cases to support strategic initiatives.
• Act as a hands-on technical subject matter expert, offering detailed coding, configuration, and engineering guidance for relevant IDAM programs and initiatives.
• Ensure compliance with global IDAM policies and processes, as well as relevant regulatory requirements, delivering secure and efficient access to Zoetis information systems for all users.
• Lead IDAM data hygiene activities, developing tools and scripts to ensure clean, accurate, and well-managed identity data across systems.
• Collaborate closely with HR teams and other stakeholders to maintain data quality and integrity while aligning IDAM services with business objectives.

Organizational Relationships

• Reports directly to

  ZICC IDAM IGA & PAM Technology Lead

• Dotted line reporting to

  US-based Head of IDAM

  and

  IDAM Operations Lead

• Member of the

  global Technology Risk Management organization

  , reporting to the Chief Information Security Officer (CISO)
• Collaborate with

  ZTD application, infrastructure, and business partner teams

• Interface with

  external vendors and integration partners

  to deploy, maintain, and support IDAM tools and services

Education and Experience

Education

• University Degree in Computer Science or Information Systems is required
• Advanced certifications or training preferred, including:
• Certified Information Systems Security Professional (CISSP)

Experience

• Minimum

  6+ years

  of experience in Information Systems
• At least

  4+ years

  of hands-on experience specifically with

  IGA tools

  , especially SailPoint IdentityIQ

• 2+ years

  of experience in a

  regulated industry

  , such as pharmaceutical or animal health
• Proven experience managing

  medium to large-scale global IT projects

• Strong record of collaboration with

  managed service providers (MSPs)

  and cross-functional teams across global time zones

Technical Skills Requirements

Identity Governance & Administration (IGA)

• Hands-on expertise with

  SailPoint IdentityIQ

  , including configuration, customization, and operational management
• Proficiency with

  Identity Lifecycle

  ,

  Access Request

  ,

  Recertification

  , and

  Provisioning/Deprovisioning

  workflows
• Integration experience with platforms like

  MS Active Directory, ServiceNow, Workday, SAP

• Proficient in

  Java, Beanshell, XML

  , and

  REST API

  development
• Advanced

  SQL

  skills for reporting and integration
• Familiarity with other IGA platforms such as

  SailPoint Identity Security Cloud (ISC)

  or

  Saviynt

  is a plus

Enterprise & Cloud Directories

• Microsoft Active Directory (AD): Deep knowledge of directory structures, user/group management, and replication troubleshooting
• Microsoft Entra ID (formerly Azure AD): Experience with Conditional Access, SSO, B2B trusts
• PowerShell scripting for automation and troubleshooting across identity platforms

Data Hygiene

• Skilled in ensuring clean, accurate identity data and collaborating with HR teams for authoritative data flow
• Knowledge of employee offboarding procedures and service account reassignments

End-User and Technology Team Support

• L2 and L3 support experience, including troubleshooting authentication and identity synchronization issues
• Familiarity with incident response workflows and RCA processes
• Experience working with

  Service Desk

  ,

  Site Services

  , and

  Security Operations

Desirable Skills

• Microsoft Power Apps for form building or workflow enhancement
• Automation/data tools such as

  Alteryx

• Understanding of data warehousing concepts and collaboration with data management teams
• Must be

  fluent in English

  , both written and spoken, and capable of engaging technical and non-technical audiences

Physical Position Requirements

• Must be available to work between

  1 PM IST and 10 PM IST

  , with

  at least 3 hours of overlap with US Eastern Time