Software Architect - Privileged Access Management

Saviynt is an identity authority platform built to power and protect the world at work. In a world of digital transformation, where organizations are faced with increasing cyber risk but cannot afford defensive measures to slow down progress, Saviynt’s Enterprise Identity Cloud gives customers unparalleled visibility, control and intelligence to better defend against threats while empowering users with right-time, right-level access to the digital technologies and tools they need to do their best work.

As a Software Architect, you will lead the architecture for Saviynt’s SaaS platform, leveraging cutting-edge cloud technologies and driving key technical decisions. You will collaborate with other architects, PAM team and the infrastructure team to design and deliver a multi-tenant PAM product that can scale on multiple cloud providers like AWS and Azure. And of course you will be hands-on and deep into designing and developing the deployment of containerized PAM services at scale to multiple cloud and Kubernetes platforms across the globe.

WHAT YOU WILL BE DOING

• Lead & drive the Software Architecture for Saviynt’s PAM SaaS platform and leverage the evolving technology landscape, tools & frameworks, and drive important technical decisions
• Define and drive the architecture of Saviynt’s PAM solution including vault, session management, multi-cloud and edge networking
• Individual contributor that works alongside other architects, PAM team and Infra team and creates/contributes to a reference architecture
• Hands-on design and development in Spring-boot, python ecosystem and educate developers to use best practices in spring application development
• Combine a broad understanding of current technologies with deep, architect-level expertise in core areas such as database design, software architecture, cloud architecture & infrastructure architecture
• Design and architect for performance, security, scalability, resilience, reuse, technology constraints, and tradeoffs
• Review and suggest improvements to IaC components like helm chart, terraform, cloud formation template
• Partner with Product Management on short & long-term product strategy and ensure the software & system architecture support product and organizational strategy and helps in achieving company goals
• Provide technical direction for architectural activities to ensure business objectives are achieved and institutionalize standard methodologies in testing, code quality and design patterns
• Drive research, technology pathfinding, product evaluation, concept building, and rapid product development to mature innovations from cradle to product
• Facilitate and drive technical design conversations as part of the backlog grooming process across development teams

WHAT YOU BRING

• Bachelor's degree in computer science or equivalent
• Experience designing and building secure, scalable and reliable multi-tenant SaaS Architectures and distributed systems
• Experience designing and building Privilege Access Management solutions
• Extensive knowledge of Privileged Access Management
• Expertise in network level application development using SSH, RDP
• Experience in automating Windows workflows using Autoit, Playwright, Selenium
• Expertise in vault design patterns for secrets management
• Deep, hands-on, architect-level understanding of various JVM frameworks like spring-boot and grails
• In-depth knowledge of how applications get deployed and run in a Kubernetes platform like AWS EKS and/or Azure AKS
• Hand-on experience architecting software that is cloud vendor agnostic
• Hands-on experience implementing containerized microservice design patterns for reliability, resiliency and performance
• Thorough knowledge of security principles and patterns of Authentication and Authorization, Single sign-on, and federation
• Knowledge of spring security, SAML, OAuth, JWT, OTP etc is highly preferred
• Hands-on experience designing REST APIs and event-driven applications
• Extensive experience troubleshooting containerized JVM runtime issues and driving to find a root cause
• Extensive experience using relational databases like MySQL or Postgres or Oracle in AWS/Azure
• Extensive experience using noSQL databases like Elasticsearch or Opensearch in AWS/Azure
• Extensive experience building event-driven distributed systems using messaging platforms like Rabbit MQ or Active MQ or Kafka
• Knowledge of IaC technologies like Terraform/Opentofu/Terragrunt, Helm chart, AWS Cloud formation template, Azure blueprint
• Knowledge of CICD pipelines for multiple cloud platforms
• Extensive experience using Git
• Understanding of reactive programming, distributed architectural design, SOLID principles, Domain Driven Design principles
• Experience with Agile/Scrum SDLC methodology
• Excellent communication skills and ability to interact with diverse global teams
• The ability to inspire, mentor and encourage teams




Nice to have




• Knowledge publishing application metric and logs to a distributed observability platform
• Structured logging and log aggregation
• Knowledge of NodeJS and Python
• Knowledge of serverless architecture like AWS lambda/Azure functions

We are looking for a dynamic individual who is passionate about leveraging cutting-edge technologies to build scalable, secure, and innovative solutions in the identity management space. If you thrive in a fast-paced environment and are excited about leading architectural decisions that drive digital transformation, we invite you to apply.

At Saviynt, you will play a crucial role in empowering organizations to navigate the complexities of identity governance and cloud security, all while working with a talented and diverse team dedicated to excellence. Together, let’s redefine what’s possible in the world of identity and access management. We look forward to reviewing your application!

If required for this role, you will:

- Complete security & privacy literacy and awareness training during onboarding and annually thereafter

- Review (initially and annually thereafter), understand, and adhere to Information Security/Privacy Policies and Procedures such as (but not limited to):

> Data Classification, Retention & Handling Policy

> Incident Response Policy/Procedures

> Business Continuity/Disaster Recovery Policy/Procedures

> Mobile Device Policy

> Account Management Policy

> Access Control Policy

> Personnel Security Policy

> Privacy Policy

Saviynt is an amazing place to work. We are a high-growth, Platform as a Service company focused on Identity Authority to power and protect the world at work. You will experience tremendous growth and learning opportunities through challenging yet rewarding work which directly impacts our customers, all within a welcoming and positive work environment. If you're resilient and enjoy working in a dynamic environment you belong with us!

Saviynt is an equal opportunity employer and we welcome everyone to our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.