Identity & Access Management Analyst

Accountabilities

• Monitor, facilitate, and operate identity and access lifecycle management controls across cloud, SaaS, directory, and enterprise environments.
• Manage user and system accounts, access groups, entitlements, ownership changes, and provisioning activities based on approved requests and business requirements.
• Operate directory-based provisioning across Microsoft Active Directory Domain Services, Microsoft Entra ID, and AWS IAM services.
• Manage and report on access certification campaigns for in-scope SaaS applications, AWS resources, Azure services, and internally managed systems.
• Ensure privileged identity lifecycle management tools and processes are used effectively and consistently.
• Continuously assess IAM controls for operational effectiveness, identify weaknesses, and implement improvements that reduce risk and increase efficiency.
• Support IAM controls aligned with NIST 800-53 Rev. 5 and other applicable security frameworks and standards.
• Provision access to cloud-based SaaS services while maintaining appropriate security and compliance controls.
• Investigate IAM control issues and identify opportunities to improve accuracy, efficiency, compliance, and automation through scripting and process optimization.
• Support internal audits and third-party assessments by explaining control processes, responding to information requests, and preparing evidence of control operation.
• Participate in cybersecurity incident response activities, investigations, audit reporting, and related security initiatives.
• Support IAM disaster recovery and business continuity planning, including readiness assessments and recovery exercises.
• Develop, maintain, and enhance IAM strategies, policies, standards, guidelines, operational procedures, and business continuity documentation.
• Collaborate with technical and business stakeholders to communicate IAM requirements, explain processes, and deliver effective identity services across the organization.
• Participate in an after-hours and weekend on-call rotation to support 24/7 operational coverage when required.

Requirements

• Bachelor’s degree in information technology or a related field, or equivalent professional experience.
• At least 2 years of experience in identity and access lifecycle management operations and controls.
• At least 2 years of experience supporting and operating cloud IAM services, preferably AWS, including access management, roles, policies, and access reporting.
• At least 2 years of experience supporting Microsoft Active Directory Domain Services, Microsoft Entra ID/Azure Active Directory, Azure Web Federation, and Active Directory Connect.
• At least 1 year of experience supporting privileged identity management tools and technologies.
• At least 1 year of experience with scripting and automation using technologies such as PowerShell, JSON, and Python.
• Practical experience with IAM controls aligned with ISO 27001/27002, FISMA, NIST, or comparable security frameworks.
• Hands-on knowledge of SailPoint IdentityNow, Okta, LDAP, directory services, operating systems, servers, and enterprise applications.
• Experience with Microsoft identity and collaboration technologies, including Active Directory, Entra ID, Office 365, Exchange, SharePoint, and Microsoft Teams.
• Experience using ServiceNow for ticketing and integration with identity platforms and connected systems.
• Experience managing access certification campaigns as part of identity lifecycle management.
• Knowledge of Windows, Linux, Red Hat, and related hosts, operating systems, and applications.
• Ability to automate identity lifecycle processes and improve operational workflows through scripting and technology.
• Strong understanding of information security policies, standards, controls, and industry best practices.
• Excellent written, verbal, interpersonal, and presentation skills, with the ability to explain technical processes to both business and technical audiences.
• Strong organizational and time-management skills, with the ability to manage multiple projects, deliverables, priorities, and stakeholders simultaneously.
• Ability to influence peers and management, collaborate across teams, and build productive relationships to achieve shared objectives.
• Self-motivated, adaptable, detail-oriented, and comfortable learning new technologies and developing new processes.
• Must be authorized to work in the United States without requiring current or future employer sponsorship.
• Relevant certifications such as CISSP, CISA, Microsoft, AWS, or equivalent credentials are desirable.

Additional preferred experience:

• Experience with disaster recovery and business continuity planning for IAM services.
• Familiarity with additional IGA/IAM and PIM platforms, including Thycotic Secret Server.
• Experience with SIEM platforms such as Splunk or Rapid7.
• Familiarity with Jira for project and time tracking.
• Experience supporting complex enterprise environments with multiple business lines and technology platforms.

Benefits

• Competitive Salary: $94,250–$107,500 annual pay range.
• Performance Compensation: Eligibility for a performance-based bonus.
• Retirement Benefits: 401(k) program with employer matching.
• Healthcare: Comprehensive healthcare coverage.
• Paid Time Off: PTO and additional