Principal Identity Access Management Specialist

About the Role:

The Principal IAM Specialist will lead the transformation of Identity Governance & Administration (IGA) by defining and implementing processes and Standard Implementation Procedures (SIPs) for efficient and compliant application onboarding. This role will focus on data analysis, role mining, SOX/SOC compliance controls mapping, Privileged Access Management (PAM), and partner access governance. This role will be heavy in IGA and Certification campaigns leaning into certifications and everything that comes with them from certifications to entitlement management and meta data updates. Controls range from Soc2/3 , SOX and ISO and should be very strong in all of these areas. The ideal candidate will collaborate with security, compliance, IT, and business stakeholders to enhance IAM efficiency, automate processes, and strengthen access controls.

Key Responsibilities:

IGA Transformation & Onboarding Process Development:
Design and implement scalable, standardized IAM processes and SIPs for onboarding applications into IGA platforms.
Define governance models, access policies, and automated provisioning workflows to streamline identity lifecycle management.
Partner with application owners, IT, and security teams to ensure proper access controls and compliance alignment.

Data Analysis & Role Mining:
Conduct role mining and entitlement reviews to establish least-privilege access controls.
Analyze access patterns, role definitions, and group structures to optimize identity governance.
Develop IAM dashboards and reports for access analytics, compliance tracking, and risk mitigation.

SOX & SOC Compliance Controls Mapping:
Map IAM controls to SOX, SOC 2, NIST, and other regulatory requirements to support audit readiness.
Establish and maintain access certification, attestation, and segregation of duties (SoD) processes.
Collaborate with auditors and compliance teams to ensure access control effectiveness and policy adherence.

Privileged Access Management (PAM) & Partner Access Governance:
Govern privileged accounts, third-party/vendor access, and non-human identities.
Implement Just-in-Time (JIT) access, session monitoring, and least-privilege enforcement for privileged users.
Ensure proper governance over partner access entitlements, group lifecycle management, and service accounts.

Qualifications & Experience:
8+ years of experience in Identity & Access Management, Information Security, or Compliance.
Expertise in IGA platforms (Saviynt, SailPoint, Okta), PAM solutions (CyberArk, BeyondTrust), and access control models (RBAC, ABAC, JIT).
Strong knowledge of SOX, SOC 2, NIST, ISO 27001, and IAM compliance frameworks.
Experience in data analysis, SQL, Power BI, and IAM automation.
Proven ability to design IAM processes, optimize access models, and drive transformation initiatives.

Preferred Qualifications:
Experience in Cloud IAM (AWS IAM, Azure AD, Google Cloud IAM).

Company Overview:

UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched. It's this expertise that equips our customers with the intelligence to solve any challenge in any industry - because great organizations know their workforce is their competitive edge. Learn more at ukg.com.

Equal Opportunity Employer

UKG is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, disability, religion, sex, age, national origin, veteran status, genetic information, and other legally protected categories.

View The EEO Know Your Rights poster

UKG participates in E-Verify. View the E-Verify posters here.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Disability Accommodation in the Application and Interview Process

For individuals with disabilities that need additional assistance at any point in the application and interview process, please email [email protected].

The pay range for this position is $142,100.00 to $204,200.00 USD, however, base pay offered may vary depending on skills, experience, job-related knowledge and location. This position is also eligible for a short-term incentive and a long-term incentive as part of total compensation. Information about UKG's comprehensive benefits can be reviewed on our careers site at https://https://www.ukg.com/careers