Identity And Access Management Analyst

Role & responsibilities

Key Responsibilities

• Lead and oversee daily IAM operations, ensuring timely execution of user provisioning, de-provisioning, and access modification requests across enterprise applications.
• Manage and optimize Joiner-Mover-Leaver (JML) lifecycle processes, ensuring secure and compliant identity management.
• Provide technical leadership and administration for IAM platforms including Okta, Microsoft Entra ID (Azure AD), Active Directory, and other identity services.
• Design, implement, and support enterprise authentication solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), SAML, OAuth 2.0, OpenID Connect (OIDC), and federation services.
• Lead application onboarding initiatives by partnering with application owners and technical teams to integrate applications into IAM solutions.
• Conduct periodic access reviews, entitlement certifications, segregation of duties (SoD) analysis, and compliance audits.
• Ensure adherence to SOX, ISO 27001, NIST, and internal security policies by implementing effective identity governance controls.
• Lead troubleshooting and resolution of complex authentication, authorization, and identity-related incidents while performing root cause analysis.
• Drive automation initiatives using PowerShell, Python, APIs, or workflow automation tools to improve IAM operational efficiency.
• Mentor and guide IAM engineers and analysts by providing technical direction, knowledge sharing, and best practices.
• Collaborate with Information Security, Infrastructure, Cloud, DevOps, HR, and Audit teams to deliver enterprise IAM initiatives.
• Lead identity integration and migration activities for mergers, acquisitions, and cloud transformation projects.
• Develop and maintain IAM architecture documentation, operational procedures, standards, and governance frameworks.
• Monitor IAM platform health, security risks, operational metrics, KPIs, and SLAs while driving continuous service improvements.
• Participate in security assessments, risk management, incident response, and remediation activities related to identity security.
• Evaluate emerging IAM technologies and recommend improvements to strengthen the organization's identity security posture.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 710+ years of experience in Identity & Access Management (IAM), Identity Governance, or Cybersecurity, with 2+ years in a technical lead or team lead role.
• Strong hands-on experience with Okta, Microsoft Entra ID (Azure AD), Active Directory, and enterprise IAM technologies.
• Extensive experience implementing and supporting SSO, MFA, SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and federation services.
• Deep understanding of Identity Governance, Role-Based Access Control (RBAC), Privileged Access Management (PAM), Least Privilege, and Zero Trust principles.
• Experience leading access certification campaigns, compliance audits, and governance initiatives.
• Strong scripting and automation experience using PowerShell, Python, REST APIs, or similar technologies.
• Experience integrating SaaS, cloud, and on-premises applications with enterprise IAM platforms.
• Solid understanding of security and compliance frameworks including SOX, ISO 27001, NIST, GDPR, and CIS controls.
• Experience with ITSM platforms such as ServiceNow and ITIL-based operational processes.
• Excellent leadership, stakeholder management, communication, and problem-solving skills.
• Ability to manage multiple projects, mentor team members, and deliver high-quality IAM services in a fast-paced environment.

Preferred Qualifications

• Experience with Identity Governance & Administration (IGA) platforms such as SailPoint, Saviynt, or Microsoft Identity Manager.
• Experience with Privileged Access Management (PAM) solutions such as CyberArk, BeyondTrust, or Delinea.
• Experience securing cloud environments including Microsoft Azure, AWS, or Google Cloud Platform.
• Knowledge of DevSecOps, Infrastructure as Code (IaC), and CI/CD security integration.