Principal Identity and Access Management Engineer IAM

Overview

The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers.

We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider.

We create an environment where our employees are proud to work and can make a positive impact. Responsibilities

• Strategy & Architecture:
• Define and evolve enterprise IAM architecture and roadmap aligned to security, compliance, and business priorities.
• Lead design of identity lifecycle management, authentication, authorization, and privileged access controls.
• Partner with security architects, cloud engineers, and business stakeholders to integrate IAM with enterprise systems.
• Engineering & Implementation:
• Architect and deploy IAM solutions, including SSO, MFA, federation, PKI, Passwordless technologies, adaptive authentication, and identity governance.
• Drive integration of SaaS, cloud (AWS, Azure, GCP), and on-prem applications with IAM platforms.
• Lead IAM modernization initiatives, such as migration to passwordless, Zero Trust frameworks, Privileged Access Management, and Secrets Management.
• Ensure compliance with standards such as NIST SP 800-63B, SOX, GDPR, and ISO 27001.
• Governance & Operations:
• Establish policies, standards, and patterns for IAM services.
• Define onboarding criteria and risk-based prioritization for applications into IGA/PAM/SSO platforms.
• Oversee access certification campaigns, RBAC/ABAC design, and least privilege enforcement.
• Collaborate with audit, risk, and compliance teams on IAM controls and reporting.
• Leadership & Mentorship:
• Act as SME and trusted advisor on IAM across the enterprise.
• Mentor and guide IAM engineers and analysts.
• Represent IAM in executive and architecture forums.