Identity And Access Management Analyst

Role & responsibilities

Key Responsibilities

• Lead and oversee daily IAM operations, ensuring timely execution of user provisioning, de-provisioning, and access modification requests across enterprise applications. 
• Manage and optimize Joiner-Mover-Leaver (JML) lifecycle processes, ensuring secure and compliant identity management.
• Provide technical leadership and administration for IAM platforms including Okta, Microsoft Entra ID (Azure AD), Active Directory, and other identity services. 
• Design, implement, and support enterprise authentication solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), SAML, OAuth 2.0, OpenID Connect (OIDC), and federation services. 
• Lead application onboarding initiatives by partnering with application owners and technical teams to integrate applications into IAM solutions. 
• Conduct periodic access reviews, entitlement certifications, segregation of duties (SoD) analysis, and compliance audits. 
• Ensure adherence to SOX, ISO 27001, NIST, and internal security policies by implementing effective identity governance controls. 
• Lead troubleshooting and resolution of complex authentication, authorization, and identity-related incidents while performing root cause analysis. 
• Drive automation initiatives using PowerShell, Python, APIs, or workflow automation tools to improve IAM operational efficiency. 
• Mentor and guide IAM engineers and analysts by providing technical direction, knowledge sharing, and best practices.
• Collaborate with Information Security, Infrastructure, Cloud, DevOps, HR, and Audit teams to deliver enterprise IAM initiatives. 
• Lead identity integration and migration activities for mergers, acquisitions, and cloud transformation projects. 
• Develop and maintain IAM architecture documentation, operational procedures, standards, and governance frameworks. 
• Monitor IAM platform health, security risks, operational metrics, KPIs, and SLAs while driving continuous service improvements. 
• Participate in security assessments, risk management, incident response, and remediation activities related to identity security. 
• Evaluate emerging IAM technologies and recommend improvements to strengthen the organization's identity security posture. 

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. 
• 710+ years of experience in Identity & Access Management (IAM), Identity Governance, or Cybersecurity, with 2+ years in a technical lead or team lead role. 
• Strong hands-on experience with Okta, Microsoft Entra ID (Azure AD), Active Directory, and enterprise IAM technologies. 
• Extensive experience implementing and supporting SSO, MFA, SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and federation services. 
• Deep understanding of Identity Governance, Role-Based Access Control (RBAC), Privileged Access Management (PAM), Least Privilege, and Zero Trust principles. 
• Experience leading access certification campaigns, compliance audits, and governance initiatives. 
• Strong scripting and automation experience using PowerShell, Python, REST APIs, or similar technologies. 
• Experience integrating SaaS, cloud, and on-premises applications with enterprise IAM platforms. 
• Solid understanding of security and compliance frameworks including SOX, ISO 27001, NIST, GDPR, and CIS controls. 
• Experience with ITSM platforms such as ServiceNow and ITIL-based operational processes. 
• Excellent leadership, stakeholder management, communication, and problem-solving skills. 
• Ability to manage multiple projects, mentor team members, and deliver high-quality IAM services in a fast-paced environment. 

Preferred Qualifications

• Experience with Identity Governance & Administration (IGA) platforms such as SailPoint, Saviynt, or Microsoft Identity Manager. 
• Experience with Privileged Access Management (PAM) solutions such as CyberArk, BeyondTrust, or Delinea. 
• Experience securing cloud environments including Microsoft Azure, AWS, or Google Cloud Platform. 
• Knowledge of DevSecOps, Infrastructure as Code (IaC), and CI/CD security integration.