IAM Security Analyst

Quantam Solutions provides IT solutions and consulting for various clients. We offer competitive hourly wages, health benefits, paid time off, and a 401(k) plan. We are currently seeking a IAM Security Analyst. Candidates will be able to work either hybrid or fully remote. Candidates that can work hybrid are preferred.

Overview:

We are seeking an experienced Information Security Analyst and Administrator to support our client's security-related technologies, processes, and implementations. This position will serve as the primary IT Security subject matter expert especially with the deployment of a new Identity Access Management solution and case management system.

Will need knowledge and experience with both on-premises and cloud environments especially within OKTA, Azure platform, and Active Directory. Strong communication and organization skills, and a deep understanding of Identity and Access Management solutions.

Duties & Responsibilities:

• Server as primary IT Security Subject Matter Expert (SME).
• Manage user authentication, authorization, and access control policies to prevent unauthorized access
• Support the design and build of role-based access control security frameworks for the department,
• Perform vulnerability scans, penetration tests, and risk assessments to identify and mitigate threats
• Monitor security alerts, investigate breaches, and respond to incidents promptly
• Develop, enforce, and update security policies; ensure compliance with legal and regulatory requirements
• Educating staff on security best practices and protocols
• Support the creation and maintenance of business continuity and disaster recovery plans
• Administer identity and access management (IAM) systems including OKTA, Active Directory, Azure AD, and privileged access workstations
• Monitor SIEM platforms (Splunk, Microsoft Sentinel, QRadar) for security events, tune alert rules, and escalate confirmed incidents
• Implement and enforce multi-factor authentication, certificate management, and single sign-on configurations across enterprise applications
• Develop and maintain security policies, standards, and procedures aligned with NIST CSF, ISO 27001, or CIS Controls frameworks
• Support security audits and compliance assessments for SOC 2, HIPAA, PCI-DSS, or FedRAMP by gathering evidence and remediating findings
• Perform security reviews on new systems, applications, and vendors as part of the change management and third-party risk process
• Investigate phishing incidents, malware infections, and unauthorized access events; document findings and implement corrective controls
• Identify and mitigate security replated project risks, issues, and dependencies, and develop contingency plans to ensure project success.

Required Skill Sets:

• Deep technical expertise in Microsoft Active Directory and Microsoft Entra ID.
• Experience designing and implementing IAM integrations, provisioning workflows, and access controls.
• Proven experience implementation & maintaining role-based access control frameworks.
• Proven ability to lead and mentor technical engineering teams.
• Strong understanding of identity security principles and enterprise authentication models.
• Previous experience with NIST CSF, ISO 27001, or CIS Controls frameworks
• Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience

Preferred Qualifications:

• Strong understanding of identity security principles and enterprise authentication models. (SAML, OIDC, SCIM) and access control models like Fine-Grained Authorization (FGA)
• Public sector child support/HHS; modernization programs.
• Firewalls and network security: Palo Alto Networks, Fortinet FortiGate, Cisco ASA/FTD — rule writing, NAT, VPN configuration
• SIEM: Splunk (SPL queries), Microsoft Sentinel (KQL), IBM QRadar — correlation rule tuning, dashboard creation
• Endpoint security: CrowdStrike Falcon, Microsoft Defender for Endpoint, Carbon Black — alert triage, isolation, policy management
• IAM: Active Directory, Azure Active Directory, Okta, CyberArk for PAM
• Scripting: PowerShell and Python for automation of repetitive security tasks (log parsing, alert enrichment, AD queries)
• Experience with ServiceNow and integration with prevalent identity access management platforms.

Tools & Platforms:

• ServiceNow, Active Directory, Okta, Ping Identity, Azure AD, Cisco ASA, Fortinet FortiGate, Palo Alto PA-OS, Check Point, FortiGate, Splunk, IBM QRadar, Microsoft Sentinel, eSet, Proofpoint Nessus, Qualys, NDiscovery, OpenVAS, ISO 27001 compliance checklists, CJIS compliance tools, SSAE 16 audit frameworks, NIST & Fed Ramp frameworks.

Certifications

• CompTIA Security+, CISSP (Certified Information Systems Security Professional), Microsoft Azure Security Engineer Associate (AZ-500), Microsoft Applied Skills: Administer Active Directory Domain Services