VP, Identity & Access Management Engineering Lead

BANC OF CALIFORNIA AND YOUR CAREER

Banc of California, Inc. (NYSE: BANC) is a bank holding company with over $34 billion in assets and the parent company of Banc of California. Banc of California is one of the nation’s premier relationship-based business banks, providing banking and treasury management services to small, middle market, and venture backed businesses. As the largest independent bank headquartered in California, the bank offers a broad range of loan and deposit products and services through a network of full-service branches and regional offices, as well as through digital and nationwide capabilities. The bank also provides full-service payment processing solutions to its clients and serves the Community Association Management industry nationwide through its technology forward platform, SmartStreet™. Banc of California is committed to supporting its local communities through the Banc of California Charitable Foundation and by partnering with organizations that promote financial literacy, job training, small business support, affordable housing, and more.

THE OPPORTUNITY

The VP, IAM Engineering Lead will be responsible for the design, configuration, deployment, and support of Saviynt Identity Governance and Administration (IGA) solution and a Privileged Access Management (PAM) solution within a regulated banking environment. This role will play a critical part in modernizing the bank’s identity lifecycle management, access certification, and privileged access controls to meet compliance, security, and operational goals. Performs all duties in accordance with the Company’s policies and procedures, all U.S. state and federal laws and regulations, wherein the Company operates.

HOW YOU’LL MAKE A DIFFERENCE

• Lead the technical implementation of Saviynt IGA, including connector development, policy configuration, and workflow customization.
• Lead the selection and technical implementation of PAM solution, including account discovery and onboarding, password rotation, session management, application integration, and workstation privilege management.
• Collaborate with cross-functional teams (security, infrastructure, HR, application owners) to integrate Saviynt and the PAM solution with core banking systems, SaaS platforms, and on-premise applications.
• Define and implement role-based access control (RBAC), attribute-based access control (ABAC), and least privilege models.
• Develop and maintain identity lifecycle processes (joiner/mover/leaver), access request workflows, and certification campaigns.
• Ensure compliance with regulatory frameworks (e.g., FFIEC, SOX, GLBA) and internal audit requirements.
• Troubleshoot and resolve issues related to identity provisioning, de-provisioning, and access anomalies.
• Create and maintain technical documentation, including architecture diagrams, configuration guides, and SOPs.
• Support testing, training, and knowledge transfer to internal teams.
• Follow all established policies and procedures.
• Perform other duties and projects as assigned.

WHAT YOU’LL BRING

• High School diploma or equivalent required.
• • 5+ years of experience in IAM engineering.
  • 2 years of hands-on Saviynt implementation experience OR 4 years of hands-on Sailpoint implementation experience.
  • 4 years of hands-on CyberArk implementation experience across AD, servers, workstations, databases and network devices, including CPM, PSM, PSMP, CP and CCP, EPM, and Remote Access.
  • Strong understanding of identity lifecycle, access governance, and directory services (e.g., Active Directory, Azure AD).
  • Experience with SAML, OAuth, SCIM, REST APIs, and other identity protocols.
  • Experience in a regulated banking or financial services environment, including familiarity with compliance and security standards relevant to financial institutions.
  • Proficiency in scripting (e.g., PowerShell, JavaScript, Groovy) for automation and customization.
  • Excellent communication and stakeholder engagement skills.
• Preferred
  • Certifications such as Saviynt Certified Engineer, CISSP, or CISM.
  • Exposure to cloud platforms (AWS, Azure) and hybrid identity models.
  • Master’s degree in Computer Science or related field.

HOW WE’LL SUPPORT YOU

• Financial Security: You will be eligible to participate in the company’s 401k plan which includes a company match and immediate vesting.
• Health & Well-Being: We offer comprehensive insurance options including medical, dental, vision, AD&D, supplemental life, long-term disability, pre-tax Health Savings Account with employer contributions, and pre-tax Flexible Spending Account (FSA).
• Building & Supporting Your Family: Banc of California partners with providers that offeradoption, surrogacy, and fertility assistance as well as paid parental leave and family support solutions including care options for your family.
• Paid Time Away: Eligible team members receive paid vacation days, holidays, and volunteer time off.
• Career Growth Opportunities: To support career growth of our team members, we offer tuition reimbursement, an annual mentorship program, leadership development resources, access to LinkedIn Learning, and more.

SALARY RANGE

The base salary ultimately offered is determined through a review of education, industry experience, training, knowledge, skills, abilities of the applicant in alignment with market data and other factors.

Banc of California is an equal opportunity employer committed to creating a diverse workforce. All qualified applicants will receive consideration for employment without regard to their actual or perceived race (including traits associated with race, such as hair texture, hair type or protective hairstyles), religion or religious creed (including religious dress and grooming practices), color, sex (including pregnancy, childbirth, breastfeeding and related medical conditions), sexual orientation, gender, gender identity, gender expression, gender transitioning, citizenship status, national origin, ancestry, age, marital status, military or veteran status, medical condition, genetic information, or disability (mental or physical), requests for accommodation and any additional protected categories set forth in applicable federal, state or local laws. If you require reasonable accommodation as part of the application process, please contact Talent Acquisition.