Lead Analyst - Customer Identity and Access Management (CIAM)

Job description

JOB DESCRIPTION Lead Analyst - ​​Customer Identity and Access Management (CIAM) The Big Picture Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 56th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry. Sysco employs over 75,000 associates, has 337 smart distribution facilities worldwide and over 14,000 IoT-enabled trucks serving 730,000 customer locations. For fiscal year 2025 that ended June 29, 2025, the company generated sales of more than $81.4 billion. Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations. Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer. The Opportunity ​Sysco is hiring a Lead Analyst - ​​Customer Identity and Access Management (CIAM) with experience in Customer Identity & Access Management (CIAM) solutions, particularly with Okta SSO and MFA. The ideal candidate will bring a minimum of 4-6+ years of experience in IAM technologies (Okta, Azure Entra, Identity Governance tools) and will be responsible for day-to-day support, analysis, and administration of CIAM services. This role requires hands-on expertise, strong troubleshooting skills, attention to detail, and the ability to collaborate with application teams to ensure secure and seamless user access. This role may occasionally require working outside regular shift hours to support critical incidents, escalations, or global coverage needs. This is an ​​individual contributor​ role. ​​This is a hybrid remote and office-based role in Sri Lanka, aligning with the local job requirement guidelines. Primary shift: [2:00PM-10:00 PM SLST, 3:30 AM-11:30 AM CDT] with flexibility. Most work is performed Monday through Friday virtually using collaboration tools and video conferencing. Our team offers on-call support. You’ll be part of a high-performing, security-driven team that values innovation, delivery excellence, and continuous learning. Responsibilities: ​​ Operational Activities: Support Okta CIAM services, including SSO, MFA, and user lifecycle operations; monitor, troubleshoot, and resolve authentication and access issues across enterprise and customer-facing applications; onboard customer-based applications into Okta​. ​​Operational Activities: Create and maintain operational documentation, runbooks, and knowledge-based articles; generate CIAM reports and metrics to support compliance and security monitoring; develop custom scripts, customizations, and APIs to support business needs. ​​​Incident Response: Provide first-level analysis of identity-related incidents and escalate as needed; collaborate with technical application teams, architecture teams, networking across global​​. ​​​Learning and Development: Participate in the training, shadow IAM engineer, and build technical skills in IAM platforms; assist with Azure Entra SSO and MFA configurations and integrations and act as backup resource to other IAM analysts as needed​​. ​​Provide 24X7 On-Call support for CIAM services.​ Requirements: ​​ Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field; or equivalent work experience.​ ​​Any IAM related certification​. ​​4 to 6+ years of experience in IAM technologies with strong hands-on expertise in Okta. ​2+ years of development experience in customization, scripts and APIs. ​Strong troubleshooting and problem-solving skills. ​Good communication and coordination abilities; able to work with cross-functional teams. ​Basic understanding of Identity Governance Solutions and Privileged Access Management​. ​​Okta Certified Professional or Developer​. ​​Hands-on experience with Okta SSO, MFA, user lifecycle, adaptive policies, risk-based authentication. ​Working knowledge of SAML, OIDC, OAuth2, and SCIM. ​Troubleshooting authentication and SSO issues across web, SaaS, and mobile apps. ​Familiarity with ticketing system (ServiceNow, JIRA). ​Ability to maintain documentation, runbooks, and process guides. ​Strong analytical and problem-solving abilities. ​Basic understanding of Identity Governance solutions. ​Familiarity with Privileged Access Management concepts.​​ Benefits: US dollar-linked compensation Performance-based annual bonus Performance rewards and recognition Agile Benefits - special allowances for Health, Wellness & Academic purposes Entertainment allowance Team engagement allowance Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws Overseas travel opportunities and exposure to client environments Hybrid work arrangement Sysco LABS is an Equal Opportunity Employer.