Senior Identity & Access Management; IAM Analyst

Lead IAM, certificate management, and system configuration initiatives in support of business and security objectives

Design, implement, document, and manage a comprehensive IAM program, including RBAC and PAM

Architect and manage the full identity lifecycle, including user onboarding, offboarding, and role-based access changes

Administer a hybrid identity environment using Microsoft Entra , Active Directory, and Okta

Configure and manage Single Sign-On (SSO) for enterprise applications

Architect and administer centralized authentication services, including MFA and SAML-based authentication

Implement and manage Privileged Access Management (PAM) solutions to secure privileged accounts

Audit user access rights to ensure alignment with business needs and security policies

Develop and maintain IAM-related procedures, standards, and documentation (user accounts, naming conventions, certificate management, integrations)

Automate IAM processes using scripting languages such as Power Shell and Python

Lead and contribute to projects that align identity configurations with cybersecurity and governance policies

Implement and maintain Windows and Linux CIS hardening templates

Leverage configuration management tools (Active Directory GPOs, Intune, SCCM, Puppet) to enforce centralized security and compliance settings

Configure Azure and Intune conditional access policies aligned with security and compliance requirements

Manage Public Key Infrastructure (PKI) and certificate lifecycle processes

Participate in design and architecture reviews as an IAM subject matter expert

Support security incident response efforts related to identity and access events

Work with auditors to provide evidence for compliance frameworks such as CSOX and CMMC

Maintain current knowledge of IAM, PAM, and RBAC best practices, standards, and regulatory requirements

Perform other related duties as required

Bachelor’s degree in Information Technology, Cybersecurity, or a related field

7+ years of hands-on experience in identity management, access management, PAM, encryption, and certificate management

Extensive experience with IAM platforms including Microsoft Entra , Active Directory, and Okta

Strong knowledge of Windows and Linux environments and configuration management tools (AD GPO, Intune, SCCM, Puppet)

Proven experience managing PKI and automating certificate lifecycle management

Strong understanding of SSO standards such as SAML, OAuth, and OIDC

Advanced scripting skills in Power Shell and experience with Python or similar languages

Experience with automation, API integrations, and IAM workflow optimization

Deep understanding of identity lifecycle management processes

Working knowledge of industry standards and compliance frameworks such as NIST and CIS

Excellent communication, interpersonal, and presentation skills with the ability to translate technical concepts for business stakeholders