Lead Security Engineer

Genworth empowers families to navigate the aging journey with confidence through compassionate guidance, products, and services. The Lead Security Engineer will design, implement, integrate, and support enterprise Identity and Access Management solutions, primarily using SailPoint platforms. The role will also strengthen identity governance, compliance, automation, and secure access processes while partnering with technical and business stakeholders.

Responsibilities:

• Design, implementation, and ongoing support of enterprise Identity and Access Management solutions with a primary focus on SailPoint IdentityIQ and SailPoint Identity Security Cloud
• Engineer and enhance identity lifecycle processes, including joiner, mover, leaver, provisioning, deprovisioning, access requests, certifications, role management, and policy enforcement
• Design, configure, and troubleshoot SailPoint workflows, rules, connectors, access profiles, roles, identity profiles, transforms, and integrations with enterprise systems
• Support migration, modernization, or coexistence efforts between SailPoint IdentityIQ and Identity Security Cloud, ensuring secure, scalable, and maintainable solutions
• Partner with application owners, infrastructure teams, HR, compliance, audit, and business stakeholders to onboard applications and improve identity governance controls
• Own complex IAM engineering work from requirements and design through build, testing, implementation, and production support
• Take accountability for technical quality, secure configuration, documentation, change readiness, and operational handoff
• Proactively identify risks, dependencies, defects, and blockers, and communicate status clearly to leadership and stakeholders
• Work closely with security architecture, IAM operations, application teams, infrastructure, cloud, HR, legal, compliance, audit, and business partners
• Translate business and compliance requirements into practical IAM designs and implementation plans
• Provide technical guidance, mentoring, and knowledge sharing to engineers, administrators, and support teams

Requirements:

• This role is not eligible for employment visa sponsorship
• This position is available to Virginia residents as Richmond or Lynchburg, VA hybrid in-office applicants or remote applicants residing in states/locations under Eastern or Central Standard Time: Alabama, Arkansas, Connecticut, Delaware, Florida, Georgia, Illinois, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Minnesota, Mississippi, Missouri, Nebraska, New Hampshire, New Jersey, New York, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas,  Vermont, Virginia, Washington DC, West Virginia or Wisconsin
• \•Hybrid in-office would be required if you reside within 50 miles of our Richmond or Lynchburg, VA office. Required in-office days are Tuesdays, Wednesdays and Thursdays, with working hours targeting our core business hours of 9am-5pm EST
• • A security-first mindset with practical experience balancing risk reduction, user experience, operational needs, and regulatory expectations
• • A strong understanding of identity governance, access management, least privilege, segregation of duties, access certification, and audit readiness
• • A continuous improvement mindset focused on simplification, automation, reliability, and measurable IAM program maturity
• • Strong problem-solving, analytical, and troubleshooting skills with the ability to resolve complex identity, access, data, and integration issues
• • Clear written and verbal communication skills, including the ability to explain technical IAM concepts to non-technical stakeholders
• • Demonstrated ownership, collaboration, attention to detail, and ability to lead work across multiple teams and priorities
• • Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience
• • 5–7 years of professional experience in Identity and Access Management, information security, or security engineering
• • Hands-on experience with SailPoint IdentityIQ and SailPoint Identity Security Cloud, including configuration, administration, development, and support
• • Experience with SailPoint workflows, rules, connectors, provisioning, certifications, access requests, roles, policies, identity profiles, access profiles, transforms, and source integrations
• • Knowledge of Java, BeanShell, JavaScript, XML, JSON, REST APIs, SCIM, JDBC, web services, and related integration patterns
• • Experience integrating IAM platforms with Active Directory, Entra ID / Azure AD, LDAP, HR systems, SaaS applications, databases, and enterprise applications
• • Understanding of SAML, OAuth, OpenID Connect, MFA, SSO, privileged access concepts, Zero Trust principles, and cloud identity patterns
• • Familiarity with SDLC, Agile delivery, change management, DevOps practices, Git, CI/CD pipelines, testing, and production support processes
• • Technical leadership and solution design
• • Identity governance and administration expertise
• • Secure engineering and compliance-oriented delivery
• • Cross-functional collaboration and stakeholder management
• • Root-cause analysis and production issue resolution
• • Documentation, audit readiness, and operational excellence
• • 5–7 years of IAM, hands on SailPoint IdentityIQ and Identity Security Cloud
• • Experience leading technical workstreams, mentoring engineers, and delivering IAM capabilities in complex enterprise environments
• • Relevant SailPoint certifications, cloud security certifications, or IAM/security certifications are preferred
• • Experience supporting regulated environments, audit requests, SOX controls, access reviews, and compliance reporting preferred