Lead Identity Engineer - RBAC (Role Mining) Specialist
About the Role
The IAM RBAC Specialist will play a key role in designing, analysing, and optimizing Role-Based Access Control (RBAC) models within the Fund’s Identity Governance ecosystem. The role primarily focuses on role mining, entitlement analysis, and RBAC design, working closely with business stakeholders and application owners to define scalable and compliant access models.
While the Fund uses Saviynt and an internal provisioning platform (provision), this is not a tool-centric engineering role. Instead, it requires a strong functional IAM professional with deep expertise in RBAC frameworks and access governance.
What You’ll Do
- Perform role mining and access analysis to identify patterns and define business roles
- Design, develop, and optimize RBAC models (business roles, technical roles, and hierarchies)
- Work with business teams and application owners to gather access requirements and validate roles
- Analyze entitlements and recommend role consolidation and optimization strategies
- Define and enforce RBAC standards, naming conventions, and governance frameworks
- Ensure RBAC models align with Segregation of Duties (SoD) and compliance requirements
- Support application onboarding by structuring roles and mapping entitlements
- Contribute to access certification and review processes
- Maintain documentation for roles, policies, and RBAC processes
- Collaborate with IAM and security teams to enhance access governance practices
- Identify opportunities to improve existing RBAC models and IAM processes
What You Bring (Key Skills and Qualification)
- 3–6 years of IAM experience with strong focus on:
- RBAC design and implementation
- Role mining and entitlement analysis
- Access governance
- Strong understanding of:
- RBAC concepts (primary requirement)
- Segregation of Duties (SoD)
- Identity Lifecycle (Joiner-Mover-Leaver)
- Proven experience working with:
- Business stakeholders for role definition
- Access data analysis and interpretation
- Strong analytical and problem-solving skills
- Excellent communication and documentation abilities
- Ability to translate business requirements into effective access control models
Nice to Have (Optional)
- Experience with Saviynt or any IGA tools (SailPoint, Oracle, etc.)
- Exposure to access certification and provisioning processes
- Familiarity with Active Directory / Microsoft Entra ID environments
- IAM certifications (preferred but not mandatory)
About Simeio and What We Do
Simeio has over 650 talented employees across the globe. We have offices in USA (Atlanta HQ and Texas), India, Canada, Costa Rica and UK.
Founded in 2007, and now backed by private equity company ZMC, Simeio is recognized as a top IAM provider by industry analysts.
Alongside Simeio’ s identity orchestration tool ‘Simeio IO’ - Simeio also partners with industry leading IAM software vendors to provide access management, identity governance and administration, privileged access management and risk intelligence services across on-premises, cloud, and hybrid technology environments.
Simeio provides services to numerous Fortune 1000 companies across all industries including financial services, technology, healthcare, media, retail, public sector, utilities and education.
Diversity & Inclusion
Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our recruitment team - [email protected].
About Your Application
We carefully review every application we receive. If your skills and experience match our needs, we’ll be in touch. If you don’t hear from us within 10 days, please don’t be discouraged—we may retain your application for future opportunities. We also encourage you to check our careers page for other openings
Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to any of the recruitment team at recruitment@simeio.com or +1 404-882-3700.