Specialist - Security Analytics & Operations

Your Opportunity

Schwab remains committed to providing increased visibility to career growth opportunities and job requirements. This posting announcement is part of increased transparency and while all qualified applicants will be reviewed and considered, this organization has a preferred candidate identified for this role.

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location.

This Business Analyst supports the end-to-end onboarding of enterprise applications into SailPoint Identity IQ (IIQ). The role partners with application owners, security teams, IAM engineering, operations, risk, and compliance stakeholders to research applications, gather and validate business and technical requirements, identify the appropriate integration method, and define roles, entitlements, approvals, ownership, provisioning, reconciliation, authentication, and certification needs. The analyst maintains complete, traceable requirements and project artifacts;

coordinates peer review, development handoff, user acceptance testing, production readiness, and post-production validation; and ensures each integration is delivered in accordance with identity governance, security, audit, and operational standards.

• Lead multiple application onboarding efforts through business intake, technical intake, requirements approval, development, testing, production deployment, and post-production validation
• Research application architecture, business purpose, current access model, existing IGA integrations, user populations, and provisioning and reconciliation processes
• Facilitate discovery sessions, application demonstrations, and stakeholder workshops to capture complete business, security, and technical requirements
• Assess and document feasible integration methods, including Active Directory, LDAP, JDBC, REST or web services, flat file, SaaS connectors, and disconnected or IAM-managed patterns
• Define and document account schemas, identity correlation attributes, roles, entitlements, role-to-entitlement mappings, request ability, risk classifications, descriptions, ownership, approval workflows, and certification requirements
• Document authentication and authorization methods, SSO dependencies, custom forms, lifecycle events, single- versus multi-entitlement behavior, and provisioning and deprovisioning use cases
• Validate user and entitlement data, identify cleanup or migration needs, and define how account aggregation and reconciliation will be performed and evidenced
• Translate approved requirements into actionable Jira stories and acceptance criteria; maintain status, risks, decisions, dependencies, approvals, and audit evidence in designated repositories
• Partner with SailPoint engineers to resolve requirement gaps, validate connector configuration details, and support development across lower environments
• Plan and execute user acceptance testing for access requests, approvals, provisioning, modifications, revocation, aggregation, reconciliation, and entitlement metadata; document findings and coordinate defect resolution
• Obtain documented application-owner approval, coordinate production readiness and decommissioning activities, and validate production accounts, entitlements, metadata, and user data against approved requirements
• Identify opportunities to standardize, simplify, and automate onboarding activities while preserving security, compliance, and auditability

To ensure that we have fulfilled our promise of…