Sr Subject Matter Expert (Support&Ops;)

Noida, Uttar Pradesh

Job Summary

IGA Engineer – RSA IG&L; / Lumos Migration Job Title: IGA Engineer (RSA IG&L; / Lumos) Function: Identity & Access Management Level: Experienced Individual Contributor (not an entry-level role) Also known as: Identity Governance Migration Engineer; Senior IAM Engineer – Governance Migration Role Overview We are looking for an experienced IGA practitioner to lead the migration of our production RSA Identity Governance & Lifecycle (IG&L;) 7.5.2 environment (formerly Aveksa) to the cloud-based Lumos platform. You will own the technical translation of existing review, request, and fulfillment workflows, database changes, and on-premises integration scripts — ensuring current operations are faithfully reproduced in Lumos with minimal disruption to production. This is not a training seat. The ideal candidate is already productive in RSA IG&L; 7.5.x (or a closely equivalent IGA platform) and can begin contributing without a long onboarding runway. The team cannot simultaneously keep production stable and teach IGA fundamentals. What You Will Do Translate existing RSA IG&L; recertification campaigns, request workflows, and fulfillment paths into equivalent Lumos configurations. Map and migrate collector definitions, reviewer-coverage logic, auto-assignment rules, and exclusion/exception handling. Write and maintain PowerShell scripts for on-premises fulfillment (grant/revoke), scheduled jobs, and directory integrations — with proper error handling, logging, and secure credential management. Execute SQL queries, data extracts, and schema mappings across Oracle and Microsoft SQL Server to support migration validation and reporting. Run dual environments during cutover: keep RSA IG&L; stable in production while Lumos configurations are built and tested. Document as-built workflows, connector logic, and scripts so knowledge is not trapped with one person. Collaborate with DBAs, identity architects, and the NAGS team to validate migration outcomes and close coverage gaps. Manage your own estimates and deliver against self-constrained dates with limited daily supervision. Required Qualifications 1. RSA IG&L; (Aveksa) — Must-Have Hands-on experience administering and configuring RSA Identity Governance & Lifecycle. Version 7.5.2 is the best fit; earlier 7.x releases are acceptable with demonstrated equivalent workflow and connector work. End-user or reviewer-only experience (clicking through campaigns) is not sufficient. Configuration of recertification campaigns, request workflows, and fulfillment/provisioning paths. Familiarity with collectors, connectors, roles, and reviewer assignment patterns. Ability to read and explain existing production configuration, not only greenfield setup. 2. Workflow Migration Fluency — Must-Have Deep understanding of how IG&L; review, request, and fulfillment workflows behave in production. This includes exception handling, reviewer coverage, auto-assignment, and fulfillment outcomes (grant and revoke) — not only the happy path. 3. Oracle & Microsoft SQL Server — Highly Desirable Comfortable writing and troubleshooting SQL, reading existing views, executing data extracts, and working with DBAs without translation overhead. The migration will require query rewrites, schema mapping, and result validation across both Oracle and MSSQL. 4. Production-Grade PowerShell — Highly Desirable Write and maintain production-quality PowerShell with error handling, logging, secure credential use, and connectivity to directories, databases, and APIs. One-off interactive scripting is not sufficient — this role requires maintainable, scheduled automation. 5. Independent Delivery — Must-Have Ability to work with limited supervision: estimate your own tasks, manage dependencies, and finish against dates — especially self-set ones. This project cannot absorb a hire who needs daily tasking or who substitutes reading documentation for shipping working configurations. Nice to Have None of the items below should block an otherwise strong IG&L;

Key Responsibilities

IGA Engineer – RSA IG&L; / Lumos Migration Job Title: IGA Engineer (RSA IG&L; / Lumos) Function: Identity & Access Management Level: Experienced Individual Contributor (not an entry-level role) Also known as: Identity Governance Migration Engineer; Senior IAM Engineer – Governance Migration Role Overview We are looking for an experienced IGA practitioner to lead the migration of our production RSA Identity Governance & Lifecycle (IG&L;) 7.5.2 environment (formerly Aveksa) to the cloud-based Lumos platform. You will own the technical translation of existing review, request, and fulfillment workflows, database changes, and on-premises integration scripts — ensuring current operations are faithfully reproduced in Lumos with minimal disruption to production. This is not a training seat.



The ideal candidate is already productive in RSA IG&L; 7.5.x (or a closely equivalent IGA platform) and can begin contributing without a long onboarding runway. The team cannot simultaneously keep production stable and teach IGA fundamentals. What You Will Do Translate existing RSA IG&L; recertification campaigns, request workflows, and fulfillment paths into equivalent Lumos configurations. Map and migrate collector definitions, reviewer-coverage logic, auto-assignment rules, and exclusion/exception handling. Write and maintain PowerShell scripts for on-premises fulfillment (grant/revoke), scheduled jobs, and directory integrations — with proper error handling, logging, and secure credential management. Execute SQL queries, data extracts, and schema mappings across Oracle and Microsoft SQL Server to support migration validation and reporting. Run dual environments during cutover: keep RSA IG&L; stable in production while Lumos configurations are built and tested. Document as-built workflows, connector logic, and scripts so knowledge is not trapped with one person. Collaborate with DBAs, identity architects, and the NAGS team to validate migration outcomes and close coverage gaps. Manage your own estimates and deliver against self-constrained dates with limited daily supervision. Required Qualifications 1. RSA IG&L; (Aveksa) — Must-Have Hands-on experience administering and configuring RSA Identity Governance & Lifecycle. Version 7.5.2 is the best fit; earlier 7.x releases are acceptable with demonstrated equivalent workflow and connector work. End-user or reviewer-only experience (clicking through campaigns) is not sufficient. Configuration of recertification campaigns, request workflows, and fulfillment/provisioning paths. Familiarity with collectors, connectors, roles, and reviewer assignment patterns. Ability to read and explain existing production configuration, not only greenfield setup. 2. Workflow Migration Fluency — Must-Have Deep understanding of how IG&L; review, request, and fulfillment workflows behave in production. This includes exception handling, reviewer coverage, auto-assignment, and fulfillment outcomes (grant and revoke) — not only the happy path. 3. Oracle & Microsoft SQL Server — Highly Desirable Comfortable writing and troubleshooting SQL, reading existing views, executing data extracts, and working with DBAs without translation overhead. The migration will require query rewrites, schema mapping, and result validation across both Oracle and MSSQL. 4. Production-Grade PowerShell — Highly Desirable Write and maintain production-quality PowerShell with error handling, logging, secure credential use, and connectivity to directories, databases, and APIs. One-off interactive scripting is not sufficient — this role requires maintainable, scheduled automation. 5. Independent Delivery — Must-Have Ability to work with limited supervision: estimate your own tasks, manage dependencies, and finish against dates — especially self-set ones. This project cannot absorb a hire who needs daily tasking or who substitutes reading documentation for shipping working configurations. Nice to Have None of the items below should block an otherwise strong IG&L;

Skill Requirements

IGA Engineer – RSA IG&L; / Lumos Migration Job Title: IGA Engineer (RSA IG&L; / Lumos) Function: Identity & Access Management Level: Experienced Individual Contributor (not an entry-level role) Also known as: Identity Governance Migration Engineer; Senior IAM Engineer – Governance Migration Role Overview We are looking for an experienced IGA practitioner to lead the migration of our production RSA Identity Governance & Lifecycle (IG&L;) 7.5.2 environment (formerly Aveksa) to the cloud-based Lumos platform. You will own the technical translation of existing review, request, and fulfillment workflows, database changes, and on-premises integration scripts — ensuring current operations are faithfully reproduced in Lumos with minimal disruption to production. This is not a training seat. The ideal candidate is already productive in RSA IG&L; 7.5.x (or a closely equivalent IGA platform) and can begin contributing without a long onboarding runway. The team cannot simultaneously keep production stable and teach IGA fundamentals. What You Will Do Translate existing RSA IG&L; recertification campaigns, request workflows, and fulfillment paths into equivalent Lumos configurations. Map and migrate collector definitions, reviewer-coverage logic, auto-assignment rules, and exclusion/exception handling. Write and maintain PowerShell scripts for on-premises fulfillment (grant/revoke),



scheduled jobs, and directory integrations — with proper error handling, logging, and secure credential management. Execute SQL queries, data extracts, and schema mappings across Oracle and Microsoft SQL Server to support migration validation and reporting. Run dual environments during cutover: keep RSA IG&L; stable in production while Lumos configurations are built and tested. Document as-built workflows, connector logic, and scripts so knowledge is not trapped with one person. Collaborate with DBAs, identity architects, and the NAGS team to validate migration outcomes and close coverage gaps. Manage your own estimates and deliver against self-constrained dates with limited daily supervision. Required Qualifications 1. RSA IG&L; (Aveksa) — Must-Have Hands-on experience administering and configuring RSA Identity Governance & Lifecycle. Version 7.5.2 is the best fit; earlier 7.x releases are acceptable with demonstrated equivalent workflow and connector work. End-user or reviewer-only experience (clicking through campaigns) is not sufficient. Configuration of recertification campaigns, request workflows, and fulfillment/provisioning paths. Familiarity with collectors, connectors, roles, and reviewer assignment patterns. Ability to read and explain existing production configuration, not only greenfield setup. 2. Workflow Migration Fluency — Must-Have Deep understanding of how IG&L; review, request, and fulfillment workflows behave in production. This includes exception handling, reviewer coverage, auto-assignment, and fulfillment outcomes (grant and revoke) — not only the happy path. 3. Oracle & Microsoft SQL Server — Highly Desirable Comfortable writing and troubleshooting SQL, reading existing views, executing data extracts, and working with DBAs without translation overhead. The migration will require query rewrites, schema mapping, and result validation across both Oracle and MSSQL. 4. Production-Grade PowerShell — Highly Desirable Write and maintain production-quality PowerShell with error handling, logging, secure credential use, and connectivity to directories, databases, and APIs. One-off interactive scripting is not sufficient — this role requires maintainable, scheduled automation. 5. Independent Delivery — Must-Have Ability to work with limited supervision: estimate your own tasks, manage dependencies, and finish against dates — especially self-set ones. This project cannot absorb a hire who needs daily tasking or who substitutes reading documentation for shipping working configurations. Nice to Have None of the items below should block an otherwise strong IG&L;

Other Requirements

SQL + PowerShell candidate. Each one reduces ramp time on the migration and reflects how the workplace runs today. Campaign & Workflow Operations Production recertification at scale: campaign setup, monitoring, exception handling, and close-out — beyond demo campaigns. Unassigned-review handling: auto-assignment rules and reviewer-coverage logic for missing, transferred, or out-of-role reviewers. Mover/career-change style reviews in addition to periodic recertification. Account collectors and application onboarding into IG&L; (accounts, entitlements, and owners into the review population). Exclusion and exception patterns (e.g., IDM/PaaS populations that must stay outside a campaign without breaking completeness). Integrations & Fulfillment BeyondTrust or comparable PAM: privileged-account reviews, API/scripted retrieval, AD service-account onboarding. PowerShell (or equivalent) revoke/grant jobs against on-premises directories and platforms outside native IG&L; provisioning. Active Directory, Kerberos, and enterprise proxy/security realities in a locked-down network. Data, Reporting & Automation Hybrid data environment: Oracle, Microsoft SQL/Azure SQL, and AWS RDS. Willingness to inherit and extend existing PowerShell module libraries (logging, connectivity tests, Task Scheduler jobs) rather than rewriting from scratch. SQL-based analysis of large review/IDM datasets to find coverage gaps beyond UI-level inspection. Migration Experience & Work Habits Prior IGA platform migration, or experience dual-running old and new IGA during cutover. Direct Lumos experience, or another SaaS IGA platform (SailPoint IdentityNow/ISC, Saviynt, or similar). Documents as-built workflows and scripts so knowledge is transferable. Production caution: change control, logging, and ability to keep legacy environment stable during parallel build. Screening Notes This is an experienced practitioner role. Screening should test real IG&L; or equivalent IGA workflow work and include a live or take-home PowerShell plus SQL sample — not years on a résumé alone. Treat NAGS-specific campaign, collector, PAM, and reporting experience as acceleration, not as a hard gate. Anything less than the five must-haves listed above turns the Lumos migration into a training programme paid for with production calendar time.

📌 Sr Subject Matter Expert (Support&Ops) (Noida)
🏢 HCLTech
📍 Noida