Identity & Access Management Analyst

Job description

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Identity & Access Management Analyst based in United States.** This is a full-time remote opportunity focused on strengthening identity and access security across a complex, cloud-based technology environment. You will help operate, monitor, and continuously improve IAM controls across enterprise applications, cloud services, directories, and SaaS platforms. The role combines hands-on identity lifecycle management with risk reduction, compliance, automation, and operational resilience. You will collaborate with cybersecurity, technology, business, audit, and other cross-functional teams to ensure access remains secure and appropriately governed. Your work will directly support privileged access management, access certifications, incident response, disaster recovery, and regulatory requirements. The position offers an opportunity to improve IAM processes through automation while working with modern identity and cloud technologies. It is well suited to a detail-oriented security professional who enjoys solving complex operational challenges and building reliable security processes. ### Accountabilities - Monitor, facilitate, and operate identity and access lifecycle management controls across cloud, SaaS, directory, and enterprise environments. - Manage user and system accounts, access groups, entitlements, ownership changes, and provisioning activities based on approved requests and business requirements. - Operate directory-based provisioning across Microsoft Active Directory Domain Services, Microsoft Entra ID, and AWS IAM services. - Manage and report on access certification campaigns for in-scope SaaS applications, AWS resources, Azure services, and internally managed systems. - Ensure privileged identity lifecycle management tools and processes are used effectively and consistently. - Continuously assess IAM controls for operational effectiveness, identify weaknesses, and implement improvements that reduce risk and increase efficiency. - Support IAM controls aligned with NIST 800-53 Rev. 5 and other applicable security frameworks and standards. - Provision access to cloud-based SaaS services while maintaining appropriate security and compliance controls. - Investigate IAM control issues and identify opportunities to improve accuracy, efficiency, compliance, and automation through scripting and process optimization. - Support internal audits and third-party assessments by explaining control processes, responding to information requests, and preparing evidence of control operation. - Participate in cybersecurity incident response activities, investigations, audit reporting, and related security initiatives. - Support IAM disaster recovery and business continuity planning, including readiness assessments and recovery exercises. - Develop, maintain, and enhance IAM strategies, policies, standards, guidelines, operational procedures, and business continuity documentation. - Collaborate with technical and business stakeholders to communicate IAM requirements, explain processes, and deliver effective identity services across the organization. - Participate in an after-hours and weekend on-call rotation to support 24/7 operational coverage when required. ## Requirements - Bachelor’s degree in information technology or a related field, or equivalent professional experience. - At least 2 years of experience in identity and access lifecycle management operations and controls. - At least 2 years of experience supporting and operating cloud IAM services, preferably AWS, including access management, roles, policies, and access reporting. - At least 2 years of experience supporting Microsoft Active Directory Domain Services, Microsoft Entra ID/Azure Active Directory, Azure Web Federation, and Active Directory Connect. - At least 1 year of experience supporting privileged identity management tools and technologies. - At least 1 year of experience with scripting and automation using technologies such as PowerShell, JSON, and Python. - Practical experience with IAM controls aligned with ISO 27001/27002, FISMA, NIST, or comparable security frameworks. - Hands-on knowledge of SailPoint IdentityNow, Okta, LDAP, directory services, operating systems, servers, and enterprise applications. - Experience with Microsoft identity and collaboration technologies, including Active Directory, Entra ID, Office 365, Exchange, SharePoint, and Microsoft Teams. - Experience using ServiceNow for ticketing and integration with identity platforms and connected systems. - Experience managing access certification campaigns as part of identity lifecycle management. - Knowledge of Windows, Linux, Red Hat, and related hosts, operating systems, and applications. - Ability to automate identity lifecycle processes and improve operational workflows through scripting and technology. - Strong understanding of information security policies, standards, controls, and industry best practices. - Excellent written, verbal, interpersonal, and presentation skills, with the ability to explain technical processes to both business and technical audiences. - Strong organizational and time-management skills, with the ability to manage multiple projects, deliverables, priorities, and stakeholders simultaneously. - Ability to influence peers and management, collaborate across teams, and build productive relationships to achieve shared objectives. - Self-motivated, adaptable, detail-oriented, and comfortable learning new technologies and developing new processes. - Must be authorized to work in the United States without requiring current or future employer sponsorship. - Relevant certifications such as CISSP, CISA, Microsoft, AWS, or equivalent credentials are desirable. **Additional preferred experience:** - Experience with disaster recovery and business continuity planning for IAM services. - Familiarity with additional IGA/IAM and PIM platforms, including Thycotic Secret Server. - Experience with SIEM platforms such as Splunk or Rapid7. - Familiarity with Jira for project and time tracking. - Experience supporting complex enterprise environments with multiple business lines and technology platforms. ## Benefits - **Competitive Salary:** $94,250–$107,500 annual pay range. - **Performance Compensation:** Eligibility for a performance-based bonus. - **Retirement Benefits:** 401(k) program with employer matching. - **Healthcare:** Comprehensive healthcare coverage. - **Paid Time Off:** PTO and additional