Identity & Access Management Analyst

Accountabilities Monitor, facilitate, and operate identity and access lifecycle management controls across cloud, SaaS, directory, and enterprise environments.

Manage user and system accounts, access groups, entitlements, ownership changes, and provisioning activities based on approved requests and business requirements.

Operate directory-based provisioning across Microsoft Active Directory Domain Services, Microsoft Entra ID, and AWS IAM services.

Manage and report on access certification campaigns for in-scope SaaS applications, AWS resources, Azure services, and internally managed systems.

Ensure privileged identity lifecycle management tools and processes are used effectively and consistently.

Continuously assess IAM controls for operational effectiveness, identify weaknesses, and implement improvements that reduce risk and increase efficiency.

Support IAM controls aligned with NIST 800-53 Rev. 5 and other applicable security frameworks and standards.

Provision access to cloud-based SaaS services while maintaining appropriate security and compliance controls.

Investigate IAM control issues and identify opportunities to improve accuracy, efficiency, compliance, and automation through scripting and process optimization.

Support internal audits and third-party assessments by explaining control processes, responding to information requests, and preparing evidence of control operation.

Participate in cybersecurity incident response activities, investigations, audit reporting, and related security initiatives.

Support IAM disaster recovery and business continuity planning, including readiness assessments and recovery exercises.

Develop, maintain, and enhance IAM strategies, policies, standards, guidelines, operational procedures, and business continuity documentation.

Collaborate with technical and business stakeholders to communicate IAM requirements, explain processes, and deliver effective identity services across the organization.

Participate in an after-hours and weekend on-call rotation to support 24/7 operational coverage when required.

Requirements

Bachelor’s degree in information technology or a related field, or equivalent professional experience.

At least 2 years of experience in identity and access lifecycle management operations and controls.

At least 2 years of experience supporting and operating cloud IAM services, preferably AWS, including access management, roles, policies, and access reporting.

At least 2 years of experience supporting Microsoft Active Directory Domain Services, Microsoft Entra ID/Azure Active Directory, Azure Web Federation, and Active Directory Connect.

At least 1 year of experience supporting privileged identity management tools and technologies.

At least 1 year of experience with scripting and automation using technologies such as PowerShell, JSON, and Python.

Practical experience with IAM controls aligned with ISO 27001/27002, FISMA, NIST, or comparable security frameworks.

Hands-on knowledge of SailPoint IdentityNow, Okta, LDAP, directory services, operating systems, servers, and enterprise applications.

Experience with Microsoft identity and collaboration technologies, including Active Directory, Entra ID, Office 365, Exchange, SharePoint, and Microsoft Teams.

Experience using ServiceNow for ticketing and integration with identity platforms and connected systems.

Experience managing access certification campaigns as part of identity lifecycle management.

Knowledge of Windows, Linux, Red Hat, and related hosts, operating systems, and applications.

Ability to automate identity lifecycle processes and improve operational workflows through scripting and technology.

Strong understanding of information security policies, standards, controls, and industry best practices.

Excellent written, verbal, interpersonal, and presentation skills, with the ability to explain technical processes to both business and technical audiences.

Strong organizational and time-management skills, with the ability to manage multiple projects, deliverables, priorities, and stakeholders simultaneously.

Ability to influence peers and management, collaborate across teams, and build productive relationships to achieve shared objectives.

Self-motivated, adaptable, detail-oriented, and comfortable learning new technologies and developing new processes.

Must be authorized to work in the United States without requiring current or future employer sponsorship.

Relevant certifications such as CISSP, CISA, Microsoft, AWS, or equivalent credentials are desirable.

Additional preferred experience:

Experience with disaster recovery and business continuity planning for IAM services.

Familiarity with additional IGA/IAM and PIM platforms, including Thycotic Secret Server.

Experience with SIEM platforms such as Splunk or Rapid7.

Familiarity with Jira for project and time tracking.

Experience supporting complex enterprise environments with multiple business lines and technology platforms.

Benefits

Competitive Salary: $94,250–$107,500 annual pay range.

Performance Compensation: Eligibility for a performance-based bonus.

Retirement Benefits: 401(k) program with employer matching.

Healthcare: Comprehensive healthcare coverage.

Paid Time Off: PTO and additional

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1