Global Identity and Access Management Engineer | EMEA

Colliers is a leading diversified professional services company. With operations in 70 countries, our more than 24,000 enterprising people work collaboratively to provide expert advice to maximize the value of property for real estate occupiers, owners, and investors. As a global leading real estate firm, Colliers is redefining workplace strategy worldwide, helping organisations rethink where they work, how much space they need, and how their workplaces should function in an increasingly complex, hybrid, and sustainability-driven landscape. ​​​Colliers is seeking a skilled IAM Engineer to join our Global Identity & Access Management (IAM) team, with a focus on delivering scalable and secure Identity Governance & Administration (IGA) solutions using Saviynt. This role will be instrumental in designing, implementing, and supporting IAM capabilities across our global enterprise, ensuring alignment with security policies, compliance requirements, and business objectives.​​ Key responsibilities: ​​​ ​Design, configure, and deploy Saviynt IGA solutions to support identity lifecycle management, application onboarding, access requests, certifications, and policy enforcement. ​Onboard human and machine identities, applications, and directories (e.g., Active Directory, Entra ID) into Saviynt. ​Develop and maintain joiner-mover-leaver workflows, access review campaigns, and SoD policies. ​Troubleshoot and resolve provisioning, access, and entitlement issues; provide L2/L3 support and coordinate with vendors as needed. ​Collaborate with internal teams (Security, HR, IT Ops, Application Owners) to align IAM solutions with business needs. ​Good communication skills and experience working with internal teams and partners. ​Document technical designs, configuration guides, and runbooks for IAM processes. ​Identify opportunities for automation and continuous improvement within the IAM ecosystem. Knowledge, Skills & Abilities: ​​​5–7 years of experience in IAM engineering, with at least 3 years hands-on with Saviynt. ​Strong understanding of identity lifecycle, RBAC, and access governance principles. ​Experience integrating Saviynt with AD/Azure AD, HR systems, and cloud applications. ​Familiarity with SSO protocols (SAML, OIDC), REST APIs, and connector frameworks. ​Proficiency in scripting (PowerShell, Java) and troubleshooting IAM workflows. ​Excellent communication skills and experience working in global, cross-functional teams.​​ Requirements: ​​​3+ years hands-on experience with Saviynt. ​Familiarity with PAM tools such as CPAM, Thycotic, BeyondTrust, CyberArk. ​Proficiency with cloud platforms (Azure, AWS, GCP). ​5–7 years of relevant IAM experience. ​Saviynt Certified IGA Professional preferred. ​Experience with AD, EntraID, Google Cloud, PKI. ​Background in compliance frameworks (SOX, GDPR, etc.).​​ Advanced communication in English. What we offer: Remote cooperation; International environment, working in English; Private healthcare with rehabilitation, 6 additional days off yearly for parents, cafeteria programme and other benefits; Internal training program; Job in a company that cares about the sustainable development of the organization; Working in a company with the titles: Best Employer 2017 and 2019 awarded by Kincentric (formerly AON) and Investor in Human Capital 2019, 2021, 2022, 2023, 2024 and 2025. Check our Warsaw Newffice | Colliers